Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa
File:                     83eac1cd-6ac8-3ad7-9211-129def9292f2.roa (raw, json)
Hash identifier:          45pX/BHUUysU8oGjGGHTYdDQfGAqRj1vwD8ATTscERU=
Subject key identifier:   23:3F:D3:A9:A1:9D:0C:65:07:A2:46:65:DF:7C:3D:D2:19:9B:D5:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290CC99C496F08761827600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cc:99:c4:96:f0:87:61:82:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=de4399eb-9065-4633-a327-950794869d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:2c:a3:50:19:ab:e9:5c:5e:c9:71:1a:fe:
                    fa:10:74:73:a7:37:b4:58:bd:01:a1:c2:0e:da:6f:
                    1e:3e:cc:66:37:80:ca:2b:3f:47:80:a3:d1:34:56:
                    a9:57:22:ca:35:07:7c:99:c7:31:79:e9:c9:1d:fc:
                    53:9b:25:2b:70:fe:2c:68:32:b2:a9:a0:ec:a6:3c:
                    fb:c7:97:23:83:d9:e7:91:f8:f0:40:de:e4:64:5a:
                    cf:13:06:ca:75:bc:27:c2:0b:19:db:11:60:71:5b:
                    92:97:84:af:6f:c5:1d:19:c1:b4:1b:ce:96:a9:4e:
                    7c:4b:e5:af:00:32:32:10:b7:cb:a1:0d:b3:30:ce:
                    bd:f8:9b:42:db:d3:2c:41:8e:ca:61:1b:c5:90:f9:
                    eb:ac:a4:82:35:99:75:33:d6:20:7d:65:85:93:de:
                    41:7b:6f:39:46:28:b7:b7:61:9e:00:af:61:f7:5d:
                    9f:89:b8:20:75:08:bf:86:55:78:78:54:92:d9:fc:
                    e5:51:42:52:e8:e8:06:0e:61:8a:b9:48:ac:5e:8a:
                    e0:79:4d:30:bf:50:86:fc:12:86:5f:13:7c:70:2e:
                    17:b3:38:8d:10:78:54:3c:c7:92:97:19:06:b8:9a:
                    aa:a2:3e:be:ed:37:3f:62:bd:6f:57:48:5e:0c:d5:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:D3:A9:A1:9D:0C:65:07:A2:46:65:DF:7C:3D:D2:19:9B:D5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:cf:f6:15:b2:04:5e:5a:64:8c:44:66:a7:aa:ae:72:e1:
         b3:f8:62:a1:b8:03:a1:2f:f0:ca:5e:a1:a2:07:f1:d4:ad:23:
         84:a0:ca:b9:28:36:4f:17:df:37:93:64:1f:05:25:c8:39:e8:
         9c:57:1a:ba:6b:38:0a:06:57:b0:09:5a:10:68:75:9d:cc:dc:
         3a:34:3c:6c:84:49:11:95:84:fa:58:1c:2a:a5:c5:d9:07:eb:
         ac:cd:3d:37:d3:80:4b:51:f4:74:12:84:ac:d8:5a:00:d6:c9:
         0a:13:b5:7f:a1:f8:8c:bc:0d:fb:de:ac:f6:f2:4d:eb:87:47:
         91:32:c9:40:d2:7c:84:0d:0f:a4:15:7a:c6:44:5a:f9:31:d3:
         8d:da:72:da:8c:6f:f8:6a:b3:88:fb:a0:c3:7f:1b:64:a2:2e:
         80:36:b2:0d:4c:c9:c7:f7:ef:7e:10:94:99:bc:a7:a2:a4:13:
         ca:8d:b8:64:c6:69:56:0d:98:52:fb:2d:40:96:0c:93:28:e1:
         ef:4d:88:8a:03:6b:63:d9:00:3b:98:41:bd:93:fe:fa:c9:e4:
         ab:cd:f6:0a:c5:2f:67:da:78:7e:15:f9:ea:b7:57:8c:64:cb:
         ff:d3:12:ab:da:ab:05:81:9e:81:21:f9:91:d5:f2:62:36:b0:
         d8:30:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:30 2025 by rpki-client