Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa
File:                     02eb2678-08b4-3db9-aa6a-912e70201d2a.roa (raw, json)
Hash identifier:          Q6m9ArLpd0I0IEX+iL9TJe76ZTdM1LBwMYK5HIvVpL0=
Subject key identifier:   40:4F:6C:96:41:B3:50:A2:5C:FF:F2:A2:F1:0A:79:F6:1C:43:5F:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DD6251AED96C48118500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396608
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:dd:62:51:ae:d9:6c:48:11:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ebf28d8f-adeb-48fb-99fc-36daea100544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:5f:c3:19:e4:60:7f:c7:0b:57:4a:b3:25:
                    78:df:78:5c:ea:38:23:cd:23:a6:9b:71:cd:6a:ba:
                    df:fc:17:81:92:ef:73:2c:e8:3d:68:62:0b:66:2e:
                    e1:f7:e6:18:89:9c:dd:de:0e:03:5f:0d:de:78:b7:
                    3b:a2:d8:9b:20:98:b9:8a:93:6b:5a:e4:2c:57:f4:
                    c5:65:9b:bb:e5:54:42:af:c9:48:dd:cf:c4:2b:c1:
                    5a:85:12:15:30:95:fa:39:d7:fc:f0:4f:db:87:af:
                    49:c5:d9:13:5c:de:03:43:eb:1d:d7:ec:34:0b:69:
                    05:a2:85:c1:6c:33:95:96:3b:da:03:e3:56:87:fc:
                    e9:04:0c:43:db:36:9b:3d:5d:b3:c5:7c:78:84:14:
                    28:66:b9:0f:52:9c:6b:32:50:e0:ae:e3:e1:e0:e2:
                    6c:47:39:0f:62:38:e9:5f:b5:53:3b:7e:38:ea:99:
                    10:2d:b4:de:e8:73:dd:80:be:e4:2a:28:40:09:e5:
                    0c:f6:ce:94:b3:df:04:5f:76:59:0c:48:c6:38:96:
                    b3:87:61:56:2c:88:24:8c:32:b2:32:e9:0e:36:ba:
                    1c:79:4b:59:64:dd:7b:7c:ab:d8:2b:9f:48:cb:ef:
                    35:49:8b:88:ca:fb:be:7f:a0:58:65:ec:92:81:45:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:6C:96:41:B3:50:A2:5C:FF:F2:A2:F1:0A:79:F6:1C:43:5F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:18:48:4d:1a:52:ab:09:7e:bd:76:95:51:e5:29:2e:c1:bf:
         74:37:42:66:f6:c0:ee:8a:25:63:c5:7a:36:41:31:24:0e:6e:
         45:8d:89:29:70:c6:98:da:7b:24:13:15:a3:eb:d6:0f:c0:46:
         da:ef:59:33:96:77:d9:c3:4d:57:d4:07:38:fe:c9:2a:ab:f4:
         62:91:a6:ad:e9:7e:b5:8d:32:ab:b2:87:df:45:c3:e6:6f:c0:
         16:77:c6:e6:e7:5a:62:45:5c:c6:13:2a:c1:df:6e:f7:43:72:
         0c:11:9c:91:07:72:96:e8:af:1a:0a:46:57:e0:b3:2b:2a:09:
         5b:c9:8a:26:5b:55:00:aa:d7:12:b8:e7:51:de:a8:c5:2c:8e:
         2b:14:5a:58:37:6c:07:11:1d:78:f0:b8:a6:d0:8a:8d:d0:65:
         85:86:44:76:65:71:9d:c8:98:4f:4a:36:f3:b9:7c:9b:f4:51:
         ef:bb:3a:32:9c:b0:25:63:63:46:7a:48:de:7b:e3:1a:9d:ba:
         e3:28:c0:59:cf:d3:1b:5d:29:5e:94:9f:62:1d:b5:70:86:56:
         a2:e7:73:0f:45:f9:73:a5:96:4b:e2:ea:e6:a4:6c:03:93:a6:
         9f:57:f4:b1:24:94:e4:03:89:08:69:a7:52:71:a7:04:84:df:
         8e:e2:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:24 2025 by rpki-client