Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa
File:                     ca33fb33-e2ee-359c-a65b-4848b8466322.roa (raw, json)
Hash identifier:          GL6JCIWot/+m5SfzfJqTgAowt1w6v8kD6y4obQFuSTg=
Subject key identifier:   D0:80:ED:88:7F:CB:CA:89:9A:F5:2B:75:B7:9C:9A:A4:A4:FE:50:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2E25A5B787C5A08B7A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396547
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2e:25:a5:b7:87:c5:a0:8b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=481889e5-9b56-43a1-a54e-dfa72d1173c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:2e:52:f2:83:54:df:0d:7e:e2:f6:46:da:
                    e4:4d:c4:25:fb:1b:e7:de:74:2d:a2:8d:40:38:d9:
                    9d:a6:a9:8e:91:ae:f2:31:e0:19:21:4b:e4:0f:e1:
                    cc:44:d0:60:0d:28:9f:83:8b:79:b1:85:a1:e7:d2:
                    2b:1c:cf:0d:65:9d:1a:6e:d0:18:bc:bb:18:45:ac:
                    8f:82:20:88:d1:f9:cf:82:aa:38:24:46:65:8b:ec:
                    43:97:7d:7e:8c:42:fd:51:aa:55:85:c5:61:bf:2e:
                    c8:c4:29:be:c1:c6:27:6b:f1:77:ae:f2:30:2a:65:
                    30:06:ab:2d:73:88:63:32:bd:68:53:b9:f4:86:73:
                    9a:a4:a1:e9:f1:e1:4e:ce:9f:4c:dd:d1:6b:3a:0b:
                    64:47:28:93:b9:af:39:ea:73:e1:69:38:d7:77:a7:
                    48:93:01:b3:3e:0c:93:76:c7:83:4b:0c:31:23:25:
                    b5:f4:54:d5:b2:a5:33:31:3f:6a:55:0b:fa:73:b7:
                    3c:b8:44:23:23:f8:99:e8:b5:16:80:f9:a5:f3:23:
                    76:91:c7:33:15:44:f7:d3:bc:2c:0f:d5:b5:61:b2:
                    0a:b0:7c:41:90:5b:10:52:c3:5f:9d:00:06:0c:4f:
                    ce:5e:91:3c:ad:13:7f:86:c1:11:8d:3d:99:11:1d:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:ED:88:7F:CB:CA:89:9A:F5:2B:75:B7:9C:9A:A4:A4:FE:50:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:82:d9:ca:4c:c2:54:b6:5c:40:de:c4:bd:ff:05:30:9a:2e:
         99:c3:33:40:6a:74:6f:48:63:25:ef:71:b2:6d:f4:17:d8:cb:
         3b:b4:ce:f1:59:9b:56:32:04:b3:4f:f3:9c:a2:d6:1e:b5:b5:
         dd:da:7d:3d:27:24:2b:b2:dd:7c:a8:be:f6:81:9d:00:b6:cf:
         ce:62:a2:4e:60:17:36:86:c9:ef:47:c7:07:36:60:a4:a6:20:
         5a:a5:e1:79:2c:d6:e0:1e:3e:2d:32:27:49:3d:97:9b:3b:2b:
         9f:f5:42:24:3a:2b:74:01:c6:ec:dd:be:38:2d:75:1c:d4:1f:
         8c:2f:96:40:2b:e5:b9:4c:8e:06:8f:49:30:de:e9:43:9e:ec:
         0f:44:27:c9:fd:39:4d:6c:4b:b2:e1:bb:ee:46:06:7a:ff:9f:
         ef:c5:a7:41:75:23:c9:3f:5a:c7:e8:1b:55:00:0c:82:c3:d8:
         7b:be:09:42:bf:05:92:cc:53:b6:b3:2e:62:26:56:58:f3:e4:
         bc:41:91:c2:d2:df:fe:fd:ae:2a:2d:5e:d9:3e:45:c3:0b:69:
         c6:80:d9:54:b4:fb:05:01:91:61:34:89:0c:18:0c:1a:fa:44:
         40:5c:3b:cd:fe:b4:cd:75:65:83:91:05:75:b8:96:70:17:6a:
         fb:4f:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:53:41 2025 by rpki-client