Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75d1f29d-7fea-3ef2-ac2d-f318c21bb282.roa
File:                     75d1f29d-7fea-3ef2-ac2d-f318c21bb282.roa (raw, json)
Hash identifier:          uFlv3rqXJpRGLRCC1JzqsmAWN5A84KCN52RM1B56Yd0=
Subject key identifier:   B9:77:A9:94:9E:AB:5E:02:54:86:A8:40:51:7D:77:8C:C2:9B:0E:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B882D993CA71770AC9F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75d1f29d-7fea-3ef2-ac2d-f318c21bb282.roa
Signing time:             Wed 20 Aug 2025 14:36:52 +0000
ROA not before:           Wed 20 Aug 2025 14:36:52 +0000
ROA not after:            Tue 18 Nov 2025 15:36:52 +0000
asID:                     396827
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:88:2d:99:3c:a7:17:70:ac:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:52 2025 GMT
            Not After : Nov 18 15:36:52 2025 GMT
        Subject: CN=898ee079-152d-4c8b-9952-b224f71a2752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:8f:2f:f2:40:da:4d:58:ab:61:db:0f:f9:
                    b9:f0:f2:ae:0c:76:2b:61:11:20:31:a6:bf:08:e9:
                    f7:21:eb:43:b5:a8:43:b8:2c:2f:df:69:f7:07:c3:
                    ed:8f:de:d6:dd:c1:08:af:a0:f6:2e:39:3f:a0:b4:
                    36:50:67:54:b8:ff:fa:d1:bb:c9:70:66:66:f6:ac:
                    f6:02:0a:43:3f:98:54:7e:1a:c2:62:4e:5a:e9:26:
                    dc:0a:3d:38:16:f4:69:ed:92:be:07:76:4c:3b:d6:
                    5c:17:df:c3:93:b1:56:31:aa:2a:2e:88:1f:43:0c:
                    c2:72:d2:74:c3:14:54:88:f7:ce:fa:fe:b9:26:9d:
                    f8:57:e0:57:69:71:40:d5:99:13:ec:05:22:4b:5b:
                    a2:b6:19:50:2b:c5:65:a0:bb:49:4e:7e:3b:30:ec:
                    4f:86:06:f5:f8:b6:db:a8:9c:7c:38:a9:33:cc:4d:
                    3e:39:ac:42:ea:c1:0c:3b:73:67:ed:6b:6c:fb:42:
                    9a:d5:25:d1:eb:51:a8:06:18:67:a9:7b:da:15:1b:
                    ed:b7:74:bc:5f:79:45:0f:9d:d4:36:a6:ee:8e:7c:
                    c6:35:b3:19:ce:5d:11:fc:44:64:b9:3c:1e:08:54:
                    66:aa:09:e2:e4:6a:e0:ad:46:ea:b7:e1:6c:05:47:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:A9:94:9E:AB:5E:02:54:86:A8:40:51:7D:77:8C:C2:9B:0E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75d1f29d-7fea-3ef2-ac2d-f318c21bb282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e7:bd:86:d9:8f:65:ad:5f:39:94:02:a0:35:34:5b:23:d4:
         f8:2e:75:37:37:fb:6d:f4:f0:6a:9e:3f:61:9e:3a:72:8b:8f:
         e7:6a:fe:64:55:78:a4:c0:9a:fd:5b:50:5b:db:d8:5f:70:d1:
         0f:69:4d:76:f7:20:23:3f:fe:59:94:d2:05:14:ef:0a:80:05:
         b2:f1:92:5d:ad:16:98:c4:e2:5e:a3:92:f4:72:c8:54:d4:a1:
         40:79:26:55:1e:3c:b0:73:56:6e:2a:64:32:02:95:52:04:b0:
         d3:9e:43:46:f9:48:01:77:79:5c:0f:2d:3d:0a:27:37:ff:4b:
         08:be:f6:c3:64:89:e8:8a:be:d2:08:dd:1d:4a:0f:f5:ed:c3:
         a5:77:5e:26:32:d5:18:77:20:8c:b0:ec:87:6a:2f:56:dc:1f:
         a1:a7:77:42:8a:08:8b:39:75:7c:80:2b:87:dd:33:ec:55:f0:
         32:b2:1e:e1:c0:19:27:15:57:e1:6c:ce:f1:45:e7:a6:05:7e:
         8b:ad:ab:a5:39:b3:de:16:6c:ef:ab:8e:b7:56:53:68:20:fa:
         3c:09:a6:ce:24:d1:f6:05:86:9d:85:a8:7d:ef:87:27:fa:55:
         9d:ec:9a:21:a1:3b:a8:2f:91:fa:88:a8:f3:cc:75:d6:5a:e8:
         d6:70:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:05 2025 by rpki-client