Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b88676-1bac-37bd-a5ba-1c8043ad2455.roa
File:                     e9b88676-1bac-37bd-a5ba-1c8043ad2455.roa (raw, json)
Hash identifier:          JWxBYq8ufqRkyUVrb/QEKz0WJcWGezIEAfLIa6n612M=
Subject key identifier:   39:BB:7F:1E:78:D6:EA:E4:9B:E3:C5:71:4E:78:DE:84:05:01:DF:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF95164016521CBA258798F20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b88676-1bac-37bd-a5ba-1c8043ad2455.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     36622
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:64:01:65:21:cb:a2:58:79:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=ec7f1d10-2a06-46c2-ab95-9add93bb2540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:08:49:7c:99:69:9a:cc:2a:25:cd:99:b9:
                    75:25:9b:cd:3b:2e:72:14:d4:80:8c:01:c5:5e:f5:
                    cb:ee:76:54:59:60:af:23:02:93:6d:4c:34:c7:21:
                    a7:8d:1a:73:61:43:5b:fc:08:3d:85:d3:ea:e8:fc:
                    26:d7:1c:6e:71:31:f7:7f:1e:d2:84:b6:b2:83:9c:
                    1d:e8:72:be:87:16:59:5c:7a:a5:44:1f:d3:ed:9f:
                    62:09:78:f8:48:95:17:5d:f4:34:d9:81:a5:72:31:
                    cc:fc:96:6c:54:f4:91:39:4f:39:5d:22:32:db:2e:
                    26:45:48:6d:58:78:0d:5e:36:c3:43:d8:5b:56:44:
                    47:46:94:d5:26:d4:10:42:d6:65:78:9c:c9:34:ea:
                    22:ec:1a:e9:67:7c:48:b8:bf:31:4b:45:34:d6:3c:
                    6e:db:ce:f8:0f:99:9d:7c:2c:86:f7:f8:c8:06:07:
                    3a:3f:f7:c3:52:45:3f:d6:83:e9:58:87:c9:07:9a:
                    45:42:2d:2e:9a:f5:56:af:39:98:48:0e:b9:25:7c:
                    c0:00:c9:8d:4e:ca:5a:b9:08:2c:6f:64:55:13:52:
                    d3:ad:55:27:3b:33:ec:29:21:e6:34:96:0a:d5:84:
                    77:c9:48:03:d6:ca:f6:41:97:fd:d0:33:9a:2a:50:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BB:7F:1E:78:D6:EA:E4:9B:E3:C5:71:4E:78:DE:84:05:01:DF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b88676-1bac-37bd-a5ba-1c8043ad2455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:13:c2:6b:f6:e4:67:03:e8:6b:1b:96:08:bb:67:0e:b9:11:
         cd:f5:5e:44:c5:3c:38:d3:00:94:77:50:dc:ac:22:71:12:f8:
         e9:37:f6:03:0a:a0:28:9a:6e:c2:a9:ae:8c:b4:bb:4e:b8:0f:
         ce:70:3a:cf:b2:8e:f1:40:71:b9:88:27:5a:e1:c7:56:60:ee:
         5f:28:67:5e:39:28:6f:70:fe:4a:d4:e4:6e:eb:55:06:23:fe:
         3d:80:85:a1:cb:17:50:56:d2:11:21:c3:16:74:1a:92:0f:94:
         e6:04:ad:85:58:7c:61:0f:12:ed:6b:7c:cb:9d:4a:26:33:3c:
         de:33:f1:1d:61:52:04:f7:be:ff:01:08:8d:df:b9:11:eb:ea:
         70:d6:80:08:ba:83:ac:c5:ac:51:13:cc:25:4b:c1:64:57:3a:
         7c:3d:4d:74:e1:83:f7:5b:b2:8d:c0:2d:b0:65:b0:25:b4:76:
         96:24:fe:05:07:97:3d:73:83:79:3f:d4:78:3b:24:35:85:56:
         24:b2:a0:0d:ef:25:9b:cc:2e:c5:af:ae:76:e8:a0:f2:09:a5:
         2b:95:6c:23:5a:18:25:9c:81:31:a5:cd:ba:a1:40:c5:9f:8d:
         ee:60:e3:18:b3:03:c3:f8:21:aa:45:3d:c6:76:ed:87:65:c1:
         d3:1c:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:04 2025 by rpki-client