Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
File:                     d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json)
Hash identifier:          5i7VNF8WPyvZwiEqHSYI/mLGjJMYrH+XDFyrqy5jKaA=
Subject key identifier:   AE:3A:84:EC:19:14:C1:1F:49:94:F6:A4:1C:45:1E:07:95:D1:0E:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C299FB361623644618B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396609
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:29:9f:b3:61:62:36:44:61:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=744a39c9-8465-43f7-abdf-f8e6ab3025e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:2f:b7:b0:43:c5:c9:68:d2:6e:aa:ac:87:
                    18:fa:55:21:56:c5:a9:85:c2:fa:1b:94:9d:15:a4:
                    fe:4f:70:54:ec:7f:08:d5:79:a6:cd:44:7c:cb:45:
                    c1:d4:cc:94:7c:b8:70:5b:d8:96:98:c1:9c:1b:d0:
                    58:cc:7f:c7:ca:78:2f:5f:4e:38:a4:8d:36:d7:43:
                    eb:ca:35:da:dd:2c:e3:27:7a:ec:1f:a0:85:df:f0:
                    e1:d6:80:3f:da:3f:42:dd:74:ea:87:f1:0f:cf:b3:
                    02:5e:27:66:30:72:2a:a5:54:ff:de:b8:42:6a:95:
                    61:0e:d5:50:ce:2d:78:24:21:1b:e2:4b:34:63:77:
                    5f:82:36:90:e0:7d:bb:32:a7:0b:f0:e2:91:88:8a:
                    c9:fc:3c:ee:3b:0d:b4:98:6b:8f:bf:d6:26:27:50:
                    b1:c7:fa:4e:98:1c:77:c4:fb:77:a2:36:21:42:f8:
                    55:f8:49:0d:b3:cb:8a:79:7b:5f:b2:54:3d:e3:6e:
                    6d:0e:be:2a:11:97:64:6d:5a:16:a1:c7:6f:08:e8:
                    ba:4c:d2:59:35:f1:be:d3:e0:a8:5b:ea:5a:84:2c:
                    a5:4e:99:17:00:6c:4d:79:72:3a:3f:aa:3f:ef:60:
                    5f:a2:7e:80:1c:a7:d0:1f:aa:9b:59:73:0b:0e:a3:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:84:EC:19:14:C1:1F:49:94:F6:A4:1C:45:1E:07:95:D1:0E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:23:b4:17:6b:23:4e:72:4a:0c:9e:97:ef:3b:e2:31:21:
         a6:72:86:c9:b3:e8:41:32:85:ca:a1:d1:ef:7b:1e:97:09:69:
         9b:3e:d5:0c:f6:d4:9d:55:56:13:87:52:c7:97:8f:ad:32:31:
         2f:53:68:a3:83:8f:84:07:7d:ad:c7:fe:70:66:ef:36:76:ba:
         a5:ef:cb:d5:84:82:07:4f:f5:e0:7b:61:86:df:2c:cf:26:90:
         9a:0d:22:64:9f:64:1c:17:a9:08:f3:f5:f9:63:cb:10:7b:99:
         48:6d:d6:9f:65:ea:3a:79:2f:1c:35:bf:4a:a9:32:a2:0c:0c:
         10:f0:f5:ea:68:97:6e:93:03:69:68:2f:b1:1c:9c:9e:51:34:
         bb:d7:df:51:1f:e9:c5:9b:f5:bb:27:c0:20:92:bb:3f:82:1d:
         09:b9:7f:0a:4d:f6:de:86:cf:df:16:4b:3c:5e:eb:3d:f2:90:
         42:47:27:8a:31:79:ee:8f:d9:3a:92:86:5e:8b:fb:0d:28:65:
         2a:eb:12:6e:9f:b4:c7:d8:f5:fa:10:5f:a6:49:0d:f3:85:2e:
         1a:bb:81:9d:85:ba:0f:57:f5:19:b8:df:40:70:79:30:f6:7d:
         89:ca:a1:ec:5a:3c:a4:4c:72:eb:27:72:76:70:6e:62:b4:72:
         cc:5f:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:00:44 2025 by rpki-client