Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa
File:                     74b2c461-aa47-3c3b-b787-5b1cd212521c.roa (raw, json)
Hash identifier:          pavD+poX842hG8oCMlIX2F4LjpF7HPzv7nhMqrr5v1o=
Subject key identifier:   30:6E:74:F9:07:86:FC:B3:89:83:91:BB:7D:06:D6:09:5A:EC:7F:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F67AB154896DAA92E5A180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     36632
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7a:b1:54:89:6d:aa:92:e5:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=689b1afb-4285-44b4-bf65-b86305d778cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:95:6e:50:96:8a:67:e5:19:82:b9:d7:f6:
                    e3:0a:30:0c:d3:cf:71:c3:07:cf:32:02:c0:62:14:
                    4d:51:80:91:64:1e:d1:61:73:4e:83:b3:10:36:87:
                    bf:c3:66:40:ad:3e:9c:10:64:d8:ea:14:84:00:c6:
                    30:a5:34:a1:16:8a:2d:3d:67:d7:cc:bb:8c:b5:37:
                    48:23:f6:0b:ba:ca:0f:bb:c4:a5:8c:e5:1e:11:ef:
                    5d:5e:67:e3:42:fa:07:38:c7:a9:06:7b:7a:40:8e:
                    ca:f8:e4:3a:61:7f:9a:b3:42:e3:bc:a7:52:a8:5e:
                    ba:4b:44:9d:47:f5:16:af:a4:65:db:95:dc:51:7e:
                    5d:7c:ce:bf:12:97:38:73:5a:5d:35:c1:17:a4:0c:
                    97:8d:d3:e3:bb:9d:6e:15:0e:df:12:b8:28:4f:65:
                    8c:f2:c3:50:5a:1b:30:bb:8a:49:27:46:51:dc:b3:
                    08:62:64:c8:37:49:3f:b0:41:4b:24:4f:a1:c5:f6:
                    b0:fb:9f:fe:5b:c9:9d:42:0d:d4:2e:73:c8:cb:d0:
                    21:43:7c:00:99:da:94:79:3e:12:49:01:fe:f0:89:
                    37:71:46:33:29:cc:08:48:e8:67:20:d1:e0:35:ce:
                    65:96:24:77:60:58:a4:27:09:7b:b5:ef:6f:99:0f:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:74:F9:07:86:FC:B3:89:83:91:BB:7D:06:D6:09:5A:EC:7F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:84:56:19:cb:1f:dd:5b:22:ed:9e:4c:1e:4d:f4:84:c9:
         1a:3e:f9:e6:3f:45:09:ae:7e:90:87:2f:b4:92:d4:47:88:91:
         0d:d5:79:80:f2:d3:61:e6:97:32:09:30:ff:09:0c:f8:ae:5b:
         6f:04:b8:2d:b7:5e:1d:03:6b:79:8e:81:10:85:8f:26:ec:b0:
         cc:5f:bc:58:94:a9:6c:f0:cc:8b:4b:28:da:71:bb:81:28:09:
         78:bc:7f:91:82:13:1a:ae:58:c2:2c:d8:a5:09:15:bf:6b:3c:
         e2:80:df:31:21:8c:80:19:1d:69:8b:a1:bb:d8:0f:86:02:4d:
         70:61:ad:d9:9e:c5:a1:15:8a:3f:56:a9:f7:9a:ff:ab:2e:f4:
         7e:57:29:ff:c6:62:11:12:02:b8:41:7f:89:42:29:80:26:6a:
         98:90:92:29:7b:7c:62:60:5b:2c:32:1c:f0:4e:47:42:2f:c1:
         79:ad:cd:b1:1a:0b:ff:e3:43:6f:25:fb:90:e4:9c:0d:26:d3:
         9c:24:d0:6f:35:ca:51:24:e5:98:7d:36:8d:60:37:51:97:22:
         3d:d3:97:8a:7e:9d:b1:15:14:70:b8:63:fe:89:90:96:08:22:
         ed:e4:b3:8a:be:53:28:30:b4:60:55:90:f2:57:2a:15:29:29:
         b5:ff:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:41 2025 by rpki-client