Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f406c0b5-b7af-3e08-8c3f-1ae3732a1720.roa
File:                     f406c0b5-b7af-3e08-8c3f-1ae3732a1720.roa (raw, json)
Hash identifier:          CVAxLV76FORX7qIuOv8pW0JLlrmq6kXZfRCK10LdRP4=
Subject key identifier:   43:E4:01:29:5A:A5:C2:C9:76:51:60:AE:CF:3F:7A:54:BF:A2:56:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67324C0740EE9732D0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f406c0b5-b7af-3e08-8c3f-1ae3732a1720.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     36632
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:73:24:c0:74:0e:e9:73:2d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=faf62ee1-ff50-4fa3-9561-973cc6e6474b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:01:59:34:29:ee:6b:c4:22:17:c8:dd:17:
                    09:3b:35:89:1a:ac:59:b7:0f:ba:b1:dc:30:8b:50:
                    cf:d4:ba:98:11:8c:bb:e1:e0:c6:93:f0:9e:01:37:
                    e1:63:b2:ac:70:5c:fc:5c:ac:66:12:a0:1e:fe:f0:
                    bc:91:75:45:db:d9:0b:44:cd:cb:61:db:f4:75:41:
                    eb:37:b6:1c:45:ea:d9:39:06:6c:b3:72:06:3b:a1:
                    81:a2:77:c1:60:bc:dd:25:77:c1:e9:ff:07:f4:2b:
                    bd:24:b9:2c:c7:67:bd:cd:99:70:09:c1:3e:4a:e6:
                    45:f3:af:e6:9a:4a:e5:14:9f:22:11:cc:27:de:68:
                    a2:cb:a6:a3:e8:d7:2b:0a:0e:7d:13:9c:f1:b6:10:
                    73:cc:04:2a:2c:5a:a5:28:cb:d4:a7:67:a5:b0:c9:
                    60:a6:8b:fb:12:18:5a:fe:1d:ed:93:74:e5:b0:d1:
                    9c:69:8c:7a:c7:34:de:d8:37:b3:c6:7d:e6:09:f0:
                    c2:0c:61:bc:89:36:53:b7:4f:ac:e3:f6:cd:d7:e4:
                    4e:6c:b4:b5:40:8f:18:53:6b:2b:70:ec:7e:b9:fb:
                    d2:9e:0e:c0:e4:5f:b9:08:92:ef:a6:d4:2e:72:36:
                    d2:a3:0e:75:2e:7f:b8:9d:61:ff:0d:8e:f5:a6:7d:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:01:29:5A:A5:C2:C9:76:51:60:AE:CF:3F:7A:54:BF:A2:56:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f406c0b5-b7af-3e08-8c3f-1ae3732a1720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:1b:06:90:d6:29:21:71:5b:66:5e:91:fb:2e:6f:0c:7b:
         de:13:25:f3:d3:9b:63:d1:6f:b5:33:3c:0a:f4:26:9f:2b:1f:
         7d:fa:bc:96:2d:01:d2:42:d1:18:e6:b3:7a:99:52:f9:42:5c:
         2b:a7:b1:04:05:6d:68:d2:79:58:a5:73:07:65:80:9c:83:39:
         9c:67:71:36:91:c4:1f:6e:57:b6:4e:ef:2f:9b:e0:9f:9b:34:
         0e:96:38:65:11:8a:73:4e:97:3e:7c:53:4e:25:4d:5a:75:fd:
         cf:e2:fb:c6:c9:35:7d:ff:4e:77:5b:1e:0c:fe:cb:1b:e1:c2:
         8a:b1:84:24:db:1f:9c:8c:23:6a:09:eb:11:2d:b9:80:82:d9:
         a1:75:7b:4b:7e:86:1a:e5:19:84:f5:cf:5f:dc:18:6f:26:44:
         a7:bf:bf:62:d8:f5:13:e9:df:4d:53:3a:26:b6:62:30:40:56:
         cc:d8:a5:23:27:9f:ea:5d:ba:83:cd:de:f0:aa:f1:da:28:e5:
         d9:ca:63:d4:b7:39:d7:43:a8:da:3e:59:c6:4c:3b:a2:a0:9f:
         32:0b:d5:ff:d5:17:0c:81:eb:77:9c:dc:02:36:39:33:80:8a:
         78:51:75:ec:5a:e4:85:aa:fe:8f:6e:88:87:fb:65:d3:8d:95:
         dd:bf:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:21 2025 by rpki-client