Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
File:                     d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa (raw, json)
Hash identifier:          3bXUz2A6fn9nfpQU9QitRJkNT578PgXFjNkNdOYIoVY=
Subject key identifier:   BC:5F:7D:A7:0E:09:A9:D1:7E:32:F1:00:46:4F:D0:5A:61:1E:6F:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA66FEC3BBDBB0BAA019500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396576
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:6f:ec:3b:bd:bb:0b:aa:01:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=0014629d-f8f4-43ab-8a1d-e32e51843654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:cf:6c:70:35:ac:86:8e:3c:33:5b:89:85:
                    42:56:e0:fa:be:08:bf:3e:d3:3f:64:20:d6:93:37:
                    cd:a0:ce:26:48:52:5c:98:a0:5f:99:19:92:a1:a8:
                    6c:38:43:04:fa:dc:66:a8:83:1c:67:56:68:c9:0b:
                    68:ec:cb:23:cf:d2:93:84:d5:e1:81:a4:b2:40:36:
                    fb:57:2e:d6:ad:d6:24:a7:67:bb:e0:62:b1:4f:f4:
                    3f:62:8b:23:09:07:f2:0b:4f:30:ea:63:85:43:15:
                    44:cf:38:c0:d7:2a:61:3d:36:db:c9:e8:e5:c7:4b:
                    aa:0a:e4:1f:0e:71:fc:86:c6:3f:0d:d1:a2:56:2d:
                    aa:b2:8f:5f:ef:7c:e7:07:c8:30:03:8c:ec:7e:af:
                    da:aa:6a:e1:d3:e2:4e:16:70:ae:95:72:19:9f:0e:
                    b2:55:bf:43:8e:8e:b3:13:28:d3:e8:fb:2d:1d:39:
                    f1:2c:71:83:83:84:4c:52:77:38:26:97:32:2c:0a:
                    77:cb:20:65:7f:44:88:e3:7b:82:b3:e9:b2:f8:46:
                    f3:a4:be:32:4c:b3:43:d4:2a:5a:48:36:02:ef:89:
                    01:1e:c3:c7:9e:16:8f:a7:9d:fc:25:0e:d6:04:43:
                    ab:08:4f:81:46:43:bd:a2:f4:c0:ab:ab:9e:8e:2c:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:7D:A7:0E:09:A9:D1:7E:32:F1:00:46:4F:D0:5A:61:1E:6F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:69:47:88:3c:70:11:64:15:b1:85:be:f4:50:30:b1:8d:
         d4:75:a1:7f:1d:14:10:33:ee:f4:a6:09:f8:05:d4:1c:46:5f:
         19:45:2f:52:43:c0:72:53:d7:ed:15:28:3f:16:36:fd:b8:50:
         f7:4f:d8:03:f6:9a:17:1a:29:19:80:0c:4b:69:a0:86:ef:47:
         03:9b:56:d7:74:0b:87:f8:8e:eb:71:3d:11:1a:ba:7b:b8:55:
         b8:bf:11:59:61:42:c5:a8:1e:23:f9:b0:81:9d:af:72:30:b9:
         ca:5d:5b:8e:f7:90:da:c5:35:31:d0:5b:9f:ae:2f:54:f7:ce:
         d8:a7:68:9a:08:4d:75:db:ac:ea:cb:d9:c3:4c:d0:8d:bc:32:
         27:f4:35:51:6e:f0:cd:8e:26:3c:ed:af:17:0d:33:3d:c2:ec:
         34:96:c2:4e:9a:b6:0b:55:86:5a:3a:0b:55:00:ee:41:53:94:
         c4:99:57:28:43:f0:62:85:23:93:e7:c9:24:d6:0b:dc:c2:5f:
         85:93:1c:44:8f:7c:ab:d9:0a:11:64:84:6e:c3:20:61:4c:49:
         cc:9a:f9:07:f0:81:40:ba:6b:ec:76:b0:28:7f:a6:a8:6a:3d:
         df:c5:07:1e:3d:e7:47:8c:95:15:ef:be:2b:14:4b:50:30:5f:
         a5:c9:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:58 2025 by rpki-client