Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/017eff6c-7983-3509-b358-60002801a33c.roa
File:                     017eff6c-7983-3509-b358-60002801a33c.roa (raw, json)
Hash identifier:          bfVLqtUwlRlkLP9MX8O3uGip0vCiNWgL2sWVWOYtdIU=
Subject key identifier:   FE:D8:5E:FC:55:43:CB:9F:11:7C:6B:2C:DE:59:11:37:2B:BD:0D:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6266943C6E9285AE3ABA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/017eff6c-7983-3509-b358-60002801a33c.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36619
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:66:94:3c:6e:92:85:ae:3a:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=7826984e-2d62-4b1a-9bd0-f79f99846461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:0a:01:87:38:63:bd:01:53:7b:65:73:12:
                    a1:a3:3f:63:b9:d0:7a:9a:ee:d5:2d:e5:0d:6a:c8:
                    b7:18:8c:c5:67:cb:56:9b:c7:1c:d9:3b:9a:65:ea:
                    25:d3:56:11:69:b2:bb:19:f8:5e:d5:c6:83:f4:64:
                    0b:c4:62:ff:38:6b:3c:b5:6e:2b:14:f4:22:ce:3c:
                    ca:1e:f1:5e:81:e8:76:68:2f:88:8d:a0:45:98:af:
                    e5:ff:ac:5e:59:bc:63:04:8a:5a:be:58:fb:30:e0:
                    32:04:ed:00:bf:f8:3c:0d:50:d8:52:3e:7e:e7:e6:
                    bb:73:0e:90:ef:fe:78:3d:be:2a:6d:5b:2d:ab:55:
                    81:a5:ab:8f:0f:b7:72:31:33:4f:25:c6:9e:90:3a:
                    ac:35:fb:3a:27:e1:cc:d9:66:d9:be:0a:6f:86:a8:
                    5d:b1:ba:a6:9f:8b:36:96:2c:3f:1c:29:54:09:27:
                    de:67:45:b5:58:a7:b7:5a:1d:d5:29:71:5c:22:42:
                    0a:c0:f9:0a:62:fa:e2:82:14:78:13:f5:b2:34:58:
                    d6:eb:7f:20:2f:3f:82:23:61:c8:c5:dd:64:c0:d2:
                    85:a0:b0:ac:20:f0:b2:77:73:4b:26:c6:fe:b2:25:
                    7b:e1:b5:87:3a:5a:c7:78:28:06:77:eb:f3:bc:23:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D8:5E:FC:55:43:CB:9F:11:7C:6B:2C:DE:59:11:37:2B:BD:0D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/017eff6c-7983-3509-b358-60002801a33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:c7:b0:d5:26:9c:0d:45:ab:06:30:53:12:7a:d8:7e:41:
         6f:b1:bb:93:22:03:c5:6d:af:ce:b7:cb:51:95:c9:e7:60:22:
         6f:9d:7f:68:f0:46:e1:29:d5:2b:11:b7:ab:5b:27:22:0d:66:
         dc:6e:03:9f:35:c3:d8:60:2a:c5:1f:e7:51:b0:85:bc:33:60:
         bd:52:7a:02:fc:28:18:0e:20:80:10:ce:c3:39:72:c6:dd:ed:
         c5:41:58:dc:d7:bc:30:18:69:62:28:a4:44:ea:3f:23:63:b9:
         eb:eb:72:bc:7f:64:d8:cf:70:d9:ef:7b:39:e9:6b:33:de:a7:
         9f:16:5f:b4:5e:fd:95:ad:9a:dc:1c:c8:9c:00:da:db:35:55:
         1e:3f:b9:68:ce:7f:a4:97:0e:c0:8e:9f:de:20:94:2b:3a:45:
         4d:a4:56:a8:d8:7a:cf:96:d9:7b:7a:95:c0:0c:a2:5b:2e:ba:
         9d:7c:1c:50:e8:1b:ed:bb:fe:90:fd:ee:3a:21:3f:82:68:19:
         d1:ce:d8:b0:b6:29:4c:9b:6f:ea:64:bb:d7:a0:8a:c9:67:04:
         ce:16:20:d2:3d:05:4d:a7:2b:6e:37:46:34:7b:c4:2e:c6:67:
         e8:9a:b4:5c:81:0c:b4:cc:6e:5b:73:4b:c6:8b:b8:a1:5d:b6:
         2f:7d:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:18:46 2025 by rpki-client