Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa
File:                     96a77ead-529e-3f09-83d7-140f4b6b99f9.roa (raw, json)
Hash identifier:          5Am6Z6ql3VfsnjJqMZdTz+zMgkFYT/0LlB/aK0GodBY=
Subject key identifier:   37:10:F2:3E:E0:24:29:19:83:17:7B:0D:F0:4E:76:99:7F:0A:F2:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD627C10689584504EAA9300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     211369
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:7c:10:68:95:84:50:4e:aa:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=d4e03e47-8ec7-410a-bf66-6e6ba1e957f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:84:00:7f:3c:a1:81:47:32:33:1a:a1:22:
                    89:88:3d:4c:af:11:b1:85:b7:a2:82:92:10:22:0a:
                    d9:a6:41:d9:7f:3f:a5:d7:d2:f4:c9:89:08:65:c1:
                    f7:d2:8f:9a:87:4b:5a:7b:85:01:12:95:bc:0c:72:
                    d8:07:fb:c1:90:5f:a4:8b:d1:9f:79:fd:8d:8d:d2:
                    77:f8:c7:16:ab:75:56:f8:25:a9:ea:8a:7e:27:57:
                    bd:a0:85:80:81:87:02:b1:b8:57:20:7a:5d:13:00:
                    4e:97:d6:f9:86:1a:90:33:ba:cc:dc:20:8e:b4:ec:
                    00:fc:d2:e0:e2:b8:6f:b2:1d:e7:0a:23:82:19:68:
                    ef:ae:37:09:d0:29:14:a3:a6:37:51:07:6c:ed:3d:
                    dd:40:ae:46:bf:0e:e2:94:74:b7:ed:03:ad:a8:b0:
                    65:5d:e4:75:cc:a5:7c:6d:d7:fe:97:ce:f9:41:c3:
                    7e:94:99:05:eb:8f:e8:90:0b:e6:dd:14:05:79:7f:
                    57:a3:37:59:9c:58:13:0d:d4:f5:4b:b1:fa:ce:92:
                    be:b8:52:84:5c:2d:8d:9e:a7:7a:28:fc:09:82:b6:
                    25:2b:6e:88:40:25:17:34:cc:ff:02:9e:69:cc:2f:
                    a1:d9:ef:f8:d7:7b:32:30:21:7c:ca:4c:46:15:d6:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:F2:3E:E0:24:29:19:83:17:7B:0D:F0:4E:76:99:7F:0A:F2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:96:4f:33:7e:c9:d1:88:18:1e:92:d6:10:71:2f:0c:50:08:
         ae:63:6e:26:64:a7:71:8f:14:5e:51:90:77:08:37:05:7f:50:
         23:66:a5:ce:f0:25:d9:64:01:62:45:05:5f:11:5a:13:c0:9c:
         cd:0a:f1:87:8e:95:01:90:55:db:4c:a4:88:91:e1:04:ae:62:
         f0:46:60:f1:59:34:2d:66:95:4d:b3:7c:37:ac:8d:15:e3:af:
         40:6b:3f:49:54:13:9e:bb:ad:46:a5:ae:e5:83:de:63:a1:40:
         1c:79:70:6e:0d:28:12:35:1f:13:df:e9:4a:ed:c9:ac:a4:20:
         7f:6e:0e:6a:28:0d:30:ac:4e:4c:dc:33:8c:d8:30:3f:a9:8b:
         68:ee:8d:f8:88:9e:37:0b:66:fc:69:77:21:35:b9:78:67:3a:
         f1:64:39:5e:a7:0b:ff:ee:0a:d1:86:d4:98:3f:ab:1c:e5:f2:
         b3:4e:9d:e5:37:90:e6:e7:49:a4:72:ce:dc:70:cd:ed:39:f3:
         8b:a8:63:1a:4f:1f:1a:39:f7:b4:a4:39:78:14:9d:1b:e2:01:
         92:b4:08:6c:26:e1:1c:32:67:89:be:35:d8:66:bc:7d:b4:c1:
         ae:78:52:87:69:46:73:d1:56:c5:3d:84:24:ee:91:6d:2f:99:
         17:fb:fd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:12:33 2025 by rpki-client