Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa
File:                     9169a49a-3c32-36d0-8510-13346f196704.roa (raw, json)
Hash identifier:          +UDF3eR8xWnkVRgBGoGbT8ByCpAlWIEfM2oMnBBs6aw=
Subject key identifier:   3B:DB:AA:13:DF:35:72:4D:86:32:F8:EF:20:24:71:55:51:67:68:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8412498CB0340FCF319CDD60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36618
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:49:8c:b0:34:0f:cf:31:9c:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0a19a3ea-d280-4860-bbb1-24644018f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:5e:b8:fe:e9:72:78:59:d0:d3:9d:36:aa:
                    ea:78:68:e8:ad:ad:30:49:5a:50:82:7f:6f:95:e6:
                    93:d5:06:0d:31:c7:0e:55:7b:d4:bc:06:e1:7b:67:
                    89:c2:5b:52:74:33:7f:5f:2e:4f:a3:02:c6:21:89:
                    cb:24:a4:31:e7:97:82:bb:90:95:ba:3c:00:91:1a:
                    49:e3:a6:64:cb:e5:f3:48:80:db:08:78:26:06:4a:
                    1e:f0:cb:ca:34:9e:c3:c0:08:30:ec:0a:23:ed:bf:
                    54:b3:65:01:a2:3d:fc:45:72:0c:83:7d:2c:b5:f5:
                    6c:58:9c:97:66:9f:41:cf:cf:04:62:b7:71:af:ba:
                    52:bf:53:67:fd:cf:c8:68:96:db:9d:9b:c0:04:e4:
                    68:20:af:b9:55:ac:3f:62:08:c4:f3:81:37:7b:6e:
                    6c:67:ce:9f:90:eb:cb:88:9e:78:cd:3e:01:c9:f0:
                    1e:d9:18:f1:09:d7:03:2a:96:d7:f6:eb:a0:88:c1:
                    87:68:e2:6f:c7:d9:9b:ee:37:46:e0:5a:95:3a:a3:
                    94:78:67:03:05:09:09:d5:ec:df:15:81:4f:34:b4:
                    11:16:2b:7c:0c:21:50:fb:03:3b:8c:ce:31:93:1a:
                    b0:64:5e:2c:4f:48:7e:ec:e4:8a:b8:97:69:05:25:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DB:AA:13:DF:35:72:4D:86:32:F8:EF:20:24:71:55:51:67:68:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:42:1c:86:f8:96:aa:14:bd:ce:65:a1:ed:75:6a:f4:33:04:
         d8:ae:a8:1e:0d:09:f8:6a:69:15:c2:13:3f:66:b7:43:ef:80:
         9e:87:d2:94:05:30:01:b6:f1:56:66:9a:2e:a6:00:f1:2b:87:
         94:22:10:8d:ae:56:4f:20:bc:f1:39:56:ff:c6:33:0e:db:33:
         db:e9:0d:fa:b5:a2:ee:e9:a2:a7:c5:ad:e5:5f:f0:9f:b6:89:
         7c:79:87:f2:33:0f:a1:5c:dc:29:59:70:c0:b4:94:26:a5:d2:
         9f:99:93:ec:00:8a:33:b6:ed:dd:13:71:82:10:7b:fe:55:56:
         b0:e8:8c:d7:5c:98:93:82:13:b4:72:ee:8a:09:f2:22:6d:db:
         0d:3e:49:52:3b:8b:d3:2c:85:4f:4d:7a:6b:54:5a:e5:16:16:
         01:bb:73:f0:d0:7f:e0:32:10:e7:7e:21:f7:29:f9:93:55:f5:
         f7:23:07:39:63:55:10:95:4d:66:7b:53:46:82:f5:6b:62:45:
         c2:f3:32:a4:71:01:88:59:c1:f4:f6:63:2a:a7:b9:e7:34:f0:
         de:50:12:10:96:ee:23:f0:ec:23:9c:19:dc:aa:dc:c0:e0:78:
         4f:3f:33:08:26:1f:a8:dd:11:b0:92:0f:a0:91:a5:61:e0:6f:
         e3:46:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:57 2025 by rpki-client