Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa
File:                     69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa (raw, json)
Hash identifier:          BGsaOEnFcNiWo2rvcMtrKB8kam9DjIvMG3prc9ryBGk=
Subject key identifier:   F7:BD:12:50:7E:76:5D:D5:A4:0C:22:14:67:A2:7B:21:03:B0:FC:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E95936D9A78F5DC70580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36625
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e9:59:36:d9:a7:8f:5d:c7:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=979c07d8-35d1-4ef7-99ff-5c078939a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:52:e6:d1:d3:7d:37:29:9e:8f:57:c6:4b:
                    79:76:36:96:f0:35:76:f0:38:25:37:c9:03:45:7b:
                    77:01:e6:9d:a7:22:9b:6b:85:5e:2b:b8:d9:20:29:
                    fa:7a:32:c4:d5:cf:be:89:ab:ec:a3:5c:3d:48:63:
                    f1:0a:3b:6a:92:f3:6a:73:7e:79:aa:68:03:3c:93:
                    42:0d:a9:37:41:02:ae:83:94:60:04:54:d0:2d:28:
                    51:07:96:f8:b8:c7:57:f0:a2:1b:53:04:71:91:80:
                    93:5d:e3:6b:ca:5f:bf:54:72:b2:eb:eb:b2:33:04:
                    93:95:87:70:7f:81:25:c3:46:78:e0:a2:65:a5:0f:
                    59:f0:94:dc:c2:c5:91:6f:ca:de:0a:12:1e:df:1e:
                    f8:1b:01:64:5b:21:52:a3:cc:f4:db:6d:25:f5:36:
                    42:07:08:a5:b1:78:26:c5:5d:89:55:6d:0c:5c:83:
                    93:a4:f7:3e:78:fd:cf:e5:63:0a:a9:b8:bf:35:8a:
                    ac:ef:41:22:83:f2:7f:f0:54:2f:15:a6:65:b5:30:
                    ae:88:0e:10:e0:e3:ee:e7:63:41:ae:35:e2:48:30:
                    f0:62:2b:fe:a5:4a:14:d6:5d:7c:9e:71:00:be:2a:
                    d6:fe:25:9e:62:15:1b:26:f6:9a:98:a6:f9:be:a9:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:12:50:7E:76:5D:D5:A4:0C:22:14:67:A2:7B:21:03:B0:FC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:0d:e5:37:65:55:45:46:6b:8d:6f:8d:b4:3b:12:92:28:
         fa:2b:7a:81:64:7b:a8:8f:26:f7:09:01:26:3a:9e:fe:26:3a:
         bf:08:52:ee:3d:c6:63:3a:55:d8:70:1e:bf:ab:43:45:11:ab:
         ed:6f:06:a2:14:33:6f:92:34:40:b7:21:6a:8c:c4:7e:08:f4:
         1e:98:44:af:9e:08:bb:fa:57:11:1b:74:18:a5:5d:a8:a2:1b:
         5b:53:07:bf:0e:96:ef:51:ab:c0:51:60:9b:3f:a6:f5:9a:8d:
         b9:2a:3f:e2:5d:8a:09:bf:8e:ff:87:c2:11:7c:04:a8:65:de:
         01:fd:2a:49:7d:14:92:23:62:4e:53:52:d2:1a:c2:54:f3:27:
         fd:94:d0:b6:95:7a:7d:e9:32:a8:47:cb:ef:da:60:c7:c2:22:
         36:b0:0f:34:98:79:a6:65:d1:22:94:23:57:95:f7:31:0f:61:
         78:5a:29:2c:01:08:67:e5:28:45:02:ad:36:5d:0f:4a:f2:76:
         cb:f0:5e:34:09:04:ed:c9:58:86:23:11:ac:d2:e1:64:3e:f3:
         1f:ad:fd:3f:1d:b3:8e:8e:df:fa:79:08:c0:d5:3d:83:fd:a7:
         b9:08:9e:a1:1d:9f:54:15:5b:bb:dc:2f:cc:31:0d:60:d0:f7:
         37:ef:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:34 2025 by rpki-client