Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
File:                     c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa (raw, json)
Hash identifier:          2FiVghMK36S16ayP0uwlkHPDFtUhznaSpBcRFRE7I5Y=
Subject key identifier:   BF:55:DE:53:11:A8:8C:18:A3:47:72:C9:36:E1:92:49:92:68:26:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D185FEC8D4D61C7C1A58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36620
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d1:85:fe:c8:d4:d6:1c:7c:1a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c635fbec-9f48-4dc3-bc47-7174f7096b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:9e:44:75:c1:cb:f0:84:5c:82:b0:a3:bd:
                    88:32:21:5f:80:31:bc:65:7b:2a:fa:eb:c2:95:69:
                    5c:c4:61:59:21:24:55:08:53:80:5a:7c:ce:e0:22:
                    b1:1b:9e:b9:7d:20:7e:b7:92:51:f5:72:77:1d:82:
                    c6:f5:f6:25:f1:eb:0e:72:a4:32:fc:6b:c0:07:eb:
                    86:ab:9c:7c:49:7f:43:9e:5b:3c:8a:d5:38:e7:6f:
                    f9:ad:00:3e:70:2c:ac:10:8f:41:8b:eb:48:c9:9a:
                    1c:5d:c8:06:51:15:79:f4:af:93:9a:9e:48:6a:7c:
                    bb:d2:fc:de:dc:9c:97:6c:a3:c8:95:f2:78:b9:73:
                    8a:a9:f2:49:c1:33:72:c5:97:75:f7:1d:52:14:46:
                    2e:f0:20:1b:03:d5:48:54:6e:f3:af:6c:f6:bb:39:
                    3b:b2:c1:6a:12:0c:a4:bb:ac:3e:0f:cc:63:a9:0d:
                    db:ac:d8:7c:77:82:a8:64:64:39:73:10:2d:83:8a:
                    a9:06:8a:74:80:ae:4e:44:10:45:8c:dc:60:c9:38:
                    bc:fd:37:3b:5e:9b:be:5d:ef:f9:1a:aa:59:cc:44:
                    8e:e9:17:f1:ce:77:85:4e:ed:38:09:b5:62:7b:ee:
                    d1:18:3e:0a:57:a9:98:21:28:b7:8f:f9:64:ae:c6:
                    d0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:55:DE:53:11:A8:8C:18:A3:47:72:C9:36:E1:92:49:92:68:26:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:9b:e5:53:c2:9a:65:8d:62:06:34:66:2c:39:ee:6b:70:
         ca:e7:b2:42:40:66:9e:a9:cc:bf:bb:90:90:ec:b9:32:0a:41:
         10:9e:66:1f:ea:ae:7b:cc:e4:b2:52:6b:c9:33:96:9f:89:46:
         a4:7c:86:e4:ab:f4:b0:f9:f4:bb:4b:17:ae:83:e6:8d:0d:a9:
         5e:0a:3a:0f:dc:8e:e4:71:20:02:06:5c:57:30:36:68:e7:0b:
         e5:3e:ca:48:23:1f:8a:67:c1:73:54:e5:db:c5:e9:28:65:e9:
         45:63:98:72:4c:e4:72:8b:9f:f3:bf:ad:1f:07:1b:93:69:c5:
         55:a5:40:9b:aa:ed:2c:83:65:f6:10:af:17:08:07:ef:b5:0f:
         d2:8a:04:c0:31:af:89:12:98:25:c4:d1:84:8f:a7:b7:49:22:
         f4:d2:7b:96:01:1c:e2:58:d3:03:16:c4:2a:e7:08:3b:e8:46:
         0a:28:c7:39:59:b4:e7:5e:65:29:9e:8d:58:91:54:a3:d1:f7:
         39:e7:64:9f:4e:d6:87:cd:7e:84:7b:1f:96:ca:49:bc:7e:3e:
         30:ae:c4:db:2d:f0:7a:77:2c:a7:84:83:8f:51:c7:32:b0:72:
         1b:73:1f:e4:d4:51:5c:55:b7:8c:c7:72:72:2c:95:a0:01:44:
         66:cc:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:54 2025 by rpki-client