Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eaf667b-4c8e-3b32-b063-10d71dfc97f1.roa
File:                     9eaf667b-4c8e-3b32-b063-10d71dfc97f1.roa (raw, json)
Hash identifier:          OU2SxSl9ZaoHoBv3ObZkvVNKjiAeNSkVEgfDF/V9IwE=
Subject key identifier:   A1:5D:98:C2:FF:40:E7:0C:BA:2C:5C:5B:1D:B7:D9:C6:E2:61:4D:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B995EE6DF9E019DCACA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eaf667b-4c8e-3b32-b063-10d71dfc97f1.roa
Signing time:             Wed 20 Aug 2025 14:37:00 +0000
ROA not before:           Wed 20 Aug 2025 14:37:00 +0000
ROA not after:            Tue 18 Nov 2025 15:37:00 +0000
asID:                     36626
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:99:5e:e6:df:9e:01:9d:ca:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:00 2025 GMT
            Not After : Nov 18 15:37:00 2025 GMT
        Subject: CN=7554e8bd-b7b0-4c48-8b63-7ffe3ab88ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:7b:cd:31:8e:64:29:cd:45:24:f8:06:d2:
                    06:00:04:0f:c2:4a:4a:57:55:d8:21:48:f4:74:03:
                    aa:ed:47:08:8f:15:cf:b8:00:b4:97:0f:25:8a:3e:
                    a9:47:c4:72:d3:5f:be:dd:1a:7a:bd:99:e0:e1:c5:
                    ba:94:99:85:58:64:a4:7c:57:ff:b6:e7:2f:86:a8:
                    fa:23:bf:fc:9e:75:fd:a2:ba:46:f6:5a:21:6b:db:
                    1d:97:cc:92:f8:2c:01:05:cf:48:41:19:ec:61:15:
                    49:b8:7d:5e:75:d2:8f:2e:69:fa:b7:9a:04:6d:81:
                    47:61:4b:bf:db:1d:bc:ad:52:f5:20:77:a1:fe:e1:
                    ad:b2:ac:f1:84:87:59:a7:75:61:9c:fd:3f:0b:1e:
                    33:c0:51:db:7a:82:f8:6a:52:82:b7:09:b0:ff:76:
                    8e:90:92:22:60:82:af:a2:75:f9:c3:71:46:3d:93:
                    f0:4b:16:3d:38:a4:16:82:80:30:0f:53:54:39:85:
                    48:c1:3f:94:d8:96:ad:df:b3:c4:b4:b7:3c:f1:7c:
                    b5:71:72:7b:12:e2:8a:30:e1:05:e2:ee:69:93:f7:
                    dc:84:6d:1b:4e:82:3d:31:8b:74:54:eb:5c:d7:81:
                    28:1c:94:b9:f1:4a:57:99:9c:36:52:25:df:1c:0b:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:98:C2:FF:40:E7:0C:BA:2C:5C:5B:1D:B7:D9:C6:E2:61:4D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eaf667b-4c8e-3b32-b063-10d71dfc97f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:d8:97:87:63:e4:27:85:70:2f:b0:9b:cc:13:00:9f:ed:
         0b:a5:cc:55:4b:de:c2:c5:3c:36:0f:d1:e7:79:73:e7:3c:69:
         81:27:a1:67:ae:7f:02:2d:15:e6:ae:d2:ff:ce:ac:0c:ff:80:
         94:7e:8f:7e:60:59:2d:1b:93:23:68:45:e8:af:bc:f0:b4:88:
         61:4a:a4:cc:65:26:2d:a9:aa:ff:d2:d7:6c:1d:f3:7d:95:27:
         45:5a:8f:da:eb:52:f8:87:93:c2:81:5e:83:82:a1:ce:24:8f:
         4c:7a:80:b8:28:da:01:65:cc:ae:ac:73:57:00:2f:25:0d:8f:
         9c:c0:91:32:10:01:b6:d0:7e:d1:d3:9b:81:a8:eb:fe:f8:49:
         0a:1a:f1:58:1f:b2:e1:8e:dc:af:32:10:3f:da:7a:46:89:59:
         44:4f:cf:27:0f:0a:dc:bc:05:f8:26:5a:06:1d:fc:32:9d:b2:
         fa:5f:2e:42:55:df:d0:85:ec:d6:b8:b3:2c:a1:9c:9e:91:e9:
         4a:01:27:2e:3b:56:ef:90:ba:3b:c3:75:3f:00:1d:4d:74:c8:
         97:c1:59:97:f8:0f:5d:01:48:dd:a2:a8:26:fd:0b:29:bd:5b:
         0c:e1:06:4c:51:7b:05:96:36:20:2b:72:12:54:4c:cc:cb:ab:
         95:8d:d3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:50 2025 by rpki-client