Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c3b8860-865c-37f7-9aad-661c645fd80b.roa
File:                     2c3b8860-865c-37f7-9aad-661c645fd80b.roa (raw, json)
Hash identifier:          HGbSKQij/xahsC0gB4+6yZ24v57FOv34TIe8Ibz4tek=
Subject key identifier:   84:FC:3C:F3:25:7D:C4:47:7D:24:34:E1:1B:6F:5F:71:C6:1E:A3:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6262A95F5D3053F5559A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c3b8860-865c-37f7-9aad-661c645fd80b.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396563
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:62:a9:5f:5d:30:53:f5:55:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=427e326a-4c06-41ac-bb49-717f627e9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:ff:80:01:e2:18:c8:c6:29:c7:91:5d:b6:
                    ca:c7:bc:a4:a0:4d:60:f4:8f:dd:94:20:6b:fb:a0:
                    52:5b:e8:d9:e8:cf:d0:94:4b:c4:ce:1f:76:89:47:
                    83:bc:ea:9f:e9:43:be:19:72:e2:d8:9a:54:4b:fd:
                    0f:96:30:69:81:68:e1:4c:ed:d8:22:2b:fc:75:1c:
                    30:d6:2e:80:e3:fd:d3:73:39:5c:67:d9:ea:f4:70:
                    b6:fe:0f:6e:f4:1b:81:61:7c:1a:3c:a3:b1:08:d9:
                    3c:33:ea:67:33:de:c3:93:6d:e4:4d:89:68:0f:bf:
                    82:d6:e6:98:b3:2e:45:84:66:31:16:1e:a3:09:4c:
                    67:d7:aa:e0:d6:6c:58:39:ba:c4:4c:06:ea:dd:aa:
                    d0:44:c5:3c:ba:04:62:82:8b:03:74:3c:0b:46:b5:
                    12:db:61:c9:0c:95:bd:3d:76:0f:85:d8:81:3a:70:
                    b3:9e:66:5f:1a:68:e4:57:f4:7a:0e:f8:0e:ec:db:
                    6b:0d:55:64:e6:68:85:57:61:15:2b:a3:55:f4:b3:
                    20:fd:cd:2a:95:73:d4:4c:94:87:51:a3:3a:fd:76:
                    38:e4:ff:1a:f4:70:3e:c8:2c:17:4c:be:9b:6b:76:
                    34:07:7f:dd:c3:df:83:5d:b7:cf:dc:a2:fd:ad:34:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FC:3C:F3:25:7D:C4:47:7D:24:34:E1:1B:6F:5F:71:C6:1E:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c3b8860-865c-37f7-9aad-661c645fd80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:82:86:a8:d7:d0:a4:8d:88:d8:bc:36:45:27:1e:4a:ee:45:
         04:4d:2e:e4:39:6d:62:cc:37:14:50:62:ad:e6:86:ab:76:72:
         8d:fe:a8:83:a5:60:85:43:53:fe:b3:db:e5:86:92:1d:5c:1b:
         45:7f:19:db:69:ad:37:99:46:79:9e:e6:28:28:a7:07:ce:58:
         73:70:d1:53:d5:d7:99:ff:29:07:4b:c4:62:14:59:fb:72:99:
         d9:bd:3c:82:2f:75:3e:c0:6f:31:4d:87:e9:e9:58:d8:b7:95:
         3f:6c:56:ff:95:30:4f:38:95:17:83:10:7a:94:33:4d:9e:ae:
         8d:5d:02:62:d9:62:0a:cb:39:38:69:70:64:11:28:a4:f4:f4:
         32:59:54:93:4f:36:d3:d0:e0:e8:4c:88:b6:3a:93:fc:2f:24:
         5b:34:69:0a:83:e3:be:6c:70:5c:88:27:9f:fb:4a:c0:2d:b8:
         63:1d:bb:15:d3:f8:f8:e2:3f:37:9e:bf:ea:b8:32:79:4f:61:
         96:a7:e1:f5:eb:eb:96:65:65:ab:c0:03:62:17:d8:46:25:c1:
         66:62:1b:cb:3c:18:ac:b5:73:b9:56:f0:28:35:c9:7f:72:5a:
         82:1e:79:1f:ef:92:03:76:49:57:73:f0:c8:93:e4:42:88:ae:
         6d:0b:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:25:59 2025 by rpki-client