Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa
File:                     7140c43d-f746-3e96-bcb2-cf4ee674029f.roa (raw, json)
Hash identifier:          MRUs6ptWPevRK8+C12/e828eThy/RTpjg/CoA+boW5M=
Subject key identifier:   59:70:5B:1A:86:F5:51:2B:8C:BE:8C:0F:91:FD:5A:48:D5:F7:EC:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F6790C1E8CC0C6E650AB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     32651
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:79:0c:1e:8c:c0:c6:e6:50:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=3ba1b506-d6e6-4846-a94c-91f57a7da87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:12:93:e8:43:eb:b6:13:86:fb:31:5e:cc:
                    ba:16:a9:48:aa:ec:06:da:da:fa:a7:cc:95:16:cf:
                    76:ed:4a:07:49:ba:0f:bc:f6:03:ee:ce:c9:a8:50:
                    db:73:3c:bd:20:6b:52:49:97:d3:07:df:24:41:d2:
                    83:76:3f:fe:9a:b8:d3:94:fe:5c:16:39:ff:0b:03:
                    63:0f:4d:cc:b5:9b:17:35:fe:b0:f2:a7:14:39:a5:
                    5c:6d:b5:04:6c:99:cf:36:22:b2:fc:16:ad:c3:fa:
                    7b:2c:70:66:a7:be:28:73:1e:d5:8d:92:cb:45:3a:
                    88:cd:3d:ca:d9:38:89:78:74:4b:52:88:32:13:30:
                    df:be:b4:db:1d:cc:b5:60:b8:61:fc:c7:18:09:8d:
                    c4:29:a3:c9:78:88:3b:46:b3:03:2d:5a:ee:aa:1c:
                    b5:3b:82:b7:e6:fd:f0:73:17:3f:d2:d2:66:e0:6b:
                    35:bd:a0:10:b9:90:2b:7c:45:ab:20:08:34:3f:36:
                    c9:fe:ee:da:fd:5a:8b:e1:35:69:e5:bd:34:36:ae:
                    6e:63:34:c7:82:63:dc:73:e8:bf:72:04:66:d7:ce:
                    d1:3b:b6:b4:79:4e:78:33:0d:05:c3:20:52:63:0f:
                    57:32:9c:e2:76:e4:a2:d5:ce:07:d7:fb:35:a4:87:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:5B:1A:86:F5:51:2B:8C:BE:8C:0F:91:FD:5A:48:D5:F7:EC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:ef:76:43:7e:bc:73:b5:99:83:49:a2:93:61:ee:6a:54:
         e7:e2:9e:85:eb:81:8d:de:65:54:9a:cb:61:4c:fa:5f:ef:33:
         cd:25:b5:fc:76:b2:2d:ce:94:af:d1:06:cc:11:95:b5:b3:81:
         3b:32:de:6d:53:57:18:39:77:46:2e:22:4f:5c:39:5d:5f:96:
         4c:00:b3:d3:74:ce:90:e0:40:e3:1e:4c:eb:e6:66:c1:e8:c3:
         96:67:92:8c:3e:c9:be:66:50:51:b3:60:df:e5:8b:3b:c2:01:
         8e:64:39:22:86:a6:7d:6c:8b:6e:8a:56:07:7b:af:3b:c3:d6:
         92:9f:18:50:ff:dd:f3:fc:67:f0:a3:56:af:ac:d3:b6:5c:38:
         c1:62:a8:ad:3f:c2:d9:5f:ed:95:dc:1e:61:7f:ff:6a:ca:5a:
         92:fe:f0:82:04:5a:85:fb:09:9c:81:41:c5:05:74:39:15:87:
         9e:fd:76:85:aa:ea:6a:26:1e:29:01:34:de:92:5d:fd:79:28:
         cd:14:3f:97:e7:c4:65:97:e5:88:3d:e3:38:9e:88:b5:e5:9f:
         ea:08:12:2a:36:3c:5c:9b:a4:ef:ae:a4:eb:08:00:01:59:07:
         7c:75:0a:05:3f:fd:27:83:45:1f:48:6c:c5:e5:31:2f:f8:1d:
         ee:c7:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:10 2025 by rpki-client