Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa
File:                     c3ef2bee-c190-3a1b-bb95-0676e2164591.roa (raw, json)
Hash identifier:          yq3+k0fXrCPA1LKjL+7wvu0pTP3cypCkr1csOwzNEAY=
Subject key identifier:   EE:27:BA:38:C6:D8:7E:D7:0C:1D:11:E2:4E:AC:4B:30:01:7F:72:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F676A78D785BBF50E5A680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396617
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:76:a7:8d:78:5b:bf:50:e5:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=70c7eb58-5c29-467c-a2c4-980b00649ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:32:7a:45:34:05:11:d4:d7:cb:4e:57:f9:
                    4e:f0:d6:dd:41:8a:2a:e0:11:dc:b7:96:c0:70:91:
                    c6:f7:ef:9b:ec:d1:44:aa:98:ed:28:a2:f7:10:d8:
                    00:94:82:24:96:5f:5e:be:da:89:7d:72:3f:e1:4e:
                    f0:12:b9:bb:46:63:17:bb:5c:52:44:2e:ed:28:b7:
                    92:6e:0d:7d:e1:e1:05:89:3e:ad:4a:40:95:47:98:
                    a0:5a:43:03:1d:e6:86:82:77:75:d0:67:82:1b:f4:
                    c6:18:74:ba:1e:c8:02:f9:52:31:4b:be:7d:0a:41:
                    69:9c:21:f1:03:14:72:bc:52:2d:65:46:ee:37:62:
                    84:16:26:ab:33:03:ba:c1:6d:c9:a8:12:f6:0c:85:
                    7b:0c:a4:9f:73:dd:e6:91:3d:ae:c9:da:a3:a2:13:
                    85:1d:90:14:80:6d:92:1e:0c:2e:f3:75:d6:5c:e9:
                    40:b0:4b:e5:23:46:26:d6:85:17:25:36:d2:58:a5:
                    bd:4d:66:d5:8f:38:fb:ec:f3:ff:f2:e0:e4:09:05:
                    52:d2:79:70:2d:6c:f1:1d:f5:3c:34:ef:13:7b:ec:
                    c3:61:fc:25:53:a8:31:47:6d:f0:9f:49:b0:c9:41:
                    f4:29:ac:07:ee:45:82:9c:ce:df:02:d3:48:90:fb:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:BA:38:C6:D8:7E:D7:0C:1D:11:E2:4E:AC:4B:30:01:7F:72:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:74:97:0b:42:24:75:d7:8f:ef:20:58:53:13:86:d7:6f:40:
         5e:7e:4d:93:7c:f7:50:94:b4:11:c0:3f:13:ec:9c:d5:3a:48:
         7b:20:88:d5:2c:a6:bd:0a:1c:e9:ea:ac:03:e9:31:10:b2:3c:
         54:17:2b:cf:85:ba:18:97:7b:90:17:3a:a3:2e:69:69:d1:18:
         57:91:06:d5:88:c7:62:70:9e:47:3f:6b:56:20:14:a7:06:54:
         5b:93:7a:91:cf:1c:77:44:d0:54:91:9e:e0:6d:ff:a8:35:90:
         ab:db:a2:92:5d:d0:8f:17:95:59:4b:25:47:5a:18:bd:a2:b6:
         5c:dd:51:8a:de:44:fe:43:0f:6e:ee:a5:0e:6a:6a:2f:9f:76:
         e1:7c:ea:a6:d3:e8:41:13:ad:26:7c:09:e0:b8:df:2d:d3:49:
         e7:a4:cb:f9:46:d4:2e:13:9e:36:12:07:4f:ee:af:e3:5e:75:
         7c:75:23:95:20:3d:8b:81:07:41:87:9e:f4:85:08:ef:fd:6d:
         4f:34:ad:79:46:fe:75:99:aa:c7:31:b6:1a:ab:c0:82:e9:86:
         52:d2:af:b2:d3:29:2a:4a:4a:1d:a9:9d:e6:36:58:3d:e0:60:
         60:82:2d:39:6d:2f:ca:66:ff:92:ce:00:89:ca:74:92:12:b8:
         59:c1:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:51 2025 by rpki-client