Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5d60d7-56ac-30ba-b14d-750e4b8fb9b5.roa
File:                     ba5d60d7-56ac-30ba-b14d-750e4b8fb9b5.roa (raw, json)
Hash identifier:          TjtFfnphEo0CQInDAS72663IU5SFKM2nFWHXbzuQnSI=
Subject key identifier:   68:3F:DD:D7:03:08:15:8C:AD:B8:9E:C3:54:56:54:3E:F0:C4:92:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE4613A60FB5C50319EFF4900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5d60d7-56ac-30ba-b14d-750e4b8fb9b5.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     36621
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:3a:60:fb:5c:50:31:9e:ff:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=b5ecc724-b89e-470c-b1b0-127566a3a7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:bb:be:23:57:cd:81:37:ec:4a:76:a0:9d:
                    92:bf:56:af:db:51:6c:69:99:9f:1a:df:6e:a8:50:
                    f3:4b:fa:2a:35:cd:44:28:6e:65:94:c0:08:0b:d3:
                    c9:d6:23:f2:0d:0b:d0:5f:68:f6:d4:6d:fd:d1:14:
                    21:31:0c:59:cd:2f:03:ce:02:ee:7d:1f:59:9f:16:
                    c7:5d:82:f7:14:e8:6b:d2:d3:c7:f1:b0:6b:39:7e:
                    75:91:18:c4:39:93:9d:6a:4a:9d:3c:bd:40:a0:5c:
                    37:fd:51:b3:bf:01:dd:51:ee:c9:e1:b2:6e:05:02:
                    eb:4c:b6:ab:c5:d2:29:a3:8c:f9:a0:c9:98:38:45:
                    e6:ff:0e:5f:67:1c:52:79:61:08:11:8b:5f:20:3d:
                    a6:32:5d:be:60:80:71:3e:2b:68:e8:26:dc:b6:cc:
                    09:e2:6a:ce:d5:5b:46:fb:8d:6a:f3:0e:86:25:b4:
                    78:e3:4e:ed:36:c5:72:80:f2:98:0b:33:6f:1e:66:
                    ae:7a:ae:3e:56:6f:25:c8:88:50:09:f8:4a:25:1d:
                    e1:ea:f1:2b:ba:a5:17:c6:c5:d0:e5:41:36:70:2c:
                    11:b2:ee:2b:e8:86:6c:19:2e:db:29:c9:71:6c:6a:
                    ab:b5:ed:b8:d8:2e:12:f9:6d:98:fd:38:57:39:1e:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:DD:D7:03:08:15:8C:AD:B8:9E:C3:54:56:54:3E:F0:C4:92:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5d60d7-56ac-30ba-b14d-750e4b8fb9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:39:6c:62:06:e1:18:8a:b5:1c:5a:cc:c4:a9:7d:b9:0c:
         0e:d3:e1:05:c3:78:f1:f3:0e:ef:16:12:43:a9:98:91:ca:22:
         fe:64:f6:5f:14:c7:03:90:93:b4:d2:2b:a8:19:8f:85:36:8e:
         28:0f:af:bd:e3:7d:18:2b:16:39:d6:17:84:97:0b:48:9b:9d:
         f2:4d:e9:a9:34:f1:3e:3c:7e:f2:dc:bd:16:93:c8:bf:92:9a:
         0b:74:64:a5:b1:3b:10:b2:06:68:53:fc:90:15:8c:33:65:ce:
         54:e2:9a:9b:d8:d4:34:c9:b0:be:48:92:d6:32:54:27:4b:ae:
         bb:64:cd:c9:8f:02:b5:db:48:a1:f7:d2:84:4e:11:2d:d1:85:
         1d:7f:86:5c:43:8e:14:54:55:76:15:4d:8e:f7:b5:1a:c9:dc:
         25:17:0d:b5:63:84:56:d4:48:b8:f6:68:03:76:c4:e0:3b:6c:
         b6:fc:49:6d:a8:56:ad:7f:15:50:00:bb:1a:44:1e:29:3d:ff:
         c8:94:ce:ff:a9:1d:fa:69:9e:2d:f5:fb:ba:57:4d:c9:d2:f2:
         70:87:b3:5b:db:27:43:21:5f:ad:d4:9f:77:14:7f:e7:18:6a:
         d9:dc:dd:48:4f:ce:9e:31:ce:0e:95:06:6b:53:0e:fb:4d:36:
         6a:45:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:18 2025 by rpki-client