Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa
File:                     470ad475-5a28-3870-aa89-b69ee397c19a.roa (raw, json)
Hash identifier:          IEyaHV9Wcp6jPbji2WsTadGDREcTLSKLgvuO6ieLbs8=
Subject key identifier:   CA:DE:52:92:03:8B:11:91:2A:A4:36:A8:4D:A2:BC:47:C5:60:1F:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6277ADADA3924EAC2936F8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396600
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:77:ad:ad:a3:92:4e:ac:29:36:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=eb5c42e2-4563-402c-993d-abad0e94576d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:b0:40:51:66:11:26:92:de:b5:ba:23:3f:
                    f5:0b:c2:8b:0c:af:4a:48:be:95:a7:a1:95:70:e3:
                    6c:0f:8a:f0:22:2d:fc:a0:13:a1:ad:f5:01:46:3f:
                    b3:e0:64:68:8d:ad:b9:48:52:38:ee:10:48:93:f7:
                    3d:19:1b:c7:03:f2:fc:67:56:61:84:f0:c4:0b:55:
                    c4:a4:2a:db:1b:8d:48:cd:e8:70:2a:b8:d4:f1:da:
                    c1:17:f4:48:c3:f1:49:32:42:f7:30:6d:20:86:46:
                    5b:72:21:78:64:c6:d5:7f:3f:ff:00:29:b9:72:05:
                    8a:7a:b6:fc:8a:9e:81:45:72:6b:ab:c7:a2:54:8e:
                    f0:97:ae:06:fb:0f:97:7b:31:65:a7:ff:1b:35:9b:
                    1c:dd:19:36:fc:31:3d:cd:9a:95:11:63:6a:77:8f:
                    a9:fc:ec:e7:f4:af:dd:1a:93:74:2a:2b:12:c1:d4:
                    ff:fe:07:69:26:f5:f8:18:56:32:4e:1d:c5:3f:51:
                    2d:83:8f:be:0a:b2:47:50:6e:1d:dd:cf:cb:eb:a5:
                    ed:1e:ac:35:01:02:ce:24:99:1c:a7:30:52:7b:a2:
                    45:0c:65:79:3b:b8:98:f1:22:7d:71:7e:d9:62:dd:
                    49:a5:41:91:be:fc:1c:49:70:3c:18:98:05:61:b5:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:52:92:03:8B:11:91:2A:A4:36:A8:4D:A2:BC:47:C5:60:1F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:78:0e:0f:20:21:2b:9a:a7:87:83:bd:ff:fe:93:04:95:
         74:9f:fc:18:54:13:78:07:c6:41:b6:93:d1:0d:49:4e:1f:5d:
         d7:e5:c1:90:32:bc:07:61:85:68:49:d5:d4:7a:1a:73:b4:41:
         36:92:65:89:00:c8:3c:14:94:77:45:d8:7a:e8:3b:7b:11:0e:
         24:92:05:e3:dc:24:db:15:e7:7b:7a:a0:b5:d1:84:79:43:db:
         65:75:f9:c9:7e:a6:1e:41:01:6f:93:1b:79:db:8f:50:54:3e:
         b7:8f:c9:f6:24:85:4a:82:69:5d:9c:fd:d8:d3:0e:ef:77:87:
         62:f0:6f:d6:db:45:50:b4:44:c7:6f:59:eb:55:fb:cb:7f:c6:
         6b:e2:c9:93:7c:b0:4f:97:9f:40:ae:41:06:2a:30:fd:28:e1:
         79:8e:2a:3f:b3:73:5c:d3:47:99:d2:a0:8f:07:2e:2f:69:8d:
         14:b4:e3:36:70:8e:ca:cd:11:cb:ca:62:a1:c6:ad:eb:a6:f1:
         21:e8:b3:2a:94:70:49:b2:6e:d8:43:88:90:7c:1c:13:1b:98:
         4d:16:0e:b9:72:1f:98:84:c0:b9:04:f1:ad:3d:44:ac:23:4c:
         7e:bb:36:40:43:f1:5f:13:9e:d3:50:da:26:16:86:78:a7:b9:
         0d:15:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:19:13 2025 by rpki-client