Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075117a6-0140-3c96-97a8-ec50d1f5382f.roa
File:                     075117a6-0140-3c96-97a8-ec50d1f5382f.roa (raw, json)
Hash identifier:          sVxxHl+Pojsrs735UBJg05k9hftyEeaKraTbekwtBOg=
Subject key identifier:   70:84:38:7B:67:22:5E:82:05:4E:F3:B0:27:9D:61:19:BC:FF:3B:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CB3C85AA9F1222E8C900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075117a6-0140-3c96-97a8-ec50d1f5382f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396615
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cb:3c:85:aa:9f:12:22:e8:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=03c5778e-f9e9-4cb2-a4cf-d46c40f24db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:8c:28:b6:c4:f4:92:bd:40:bb:71:84:dd:
                    15:e7:c2:7b:63:bc:74:e2:85:82:ab:65:82:c4:77:
                    90:29:3a:d3:1f:9c:3a:d8:c4:38:27:5a:e8:f8:91:
                    b6:1e:73:30:b8:35:46:4c:ac:da:a9:43:d6:56:80:
                    81:40:41:4c:0d:3b:5d:b7:97:dd:31:e2:2b:20:b5:
                    b2:8d:b8:a1:30:45:9d:d0:ea:ad:2a:70:88:97:7a:
                    fc:b6:a0:24:9f:40:5a:7b:9a:09:f5:51:3f:79:59:
                    44:54:e5:b5:92:29:07:93:eb:3b:d7:16:17:62:a7:
                    83:f5:a2:59:89:bc:c9:e7:18:d2:ec:f0:ee:6c:c4:
                    cf:fe:bd:3b:db:51:e2:7c:8a:1a:19:bc:1f:fc:59:
                    21:bb:82:f3:cf:65:f2:75:20:ef:ac:d5:e1:73:86:
                    c4:d6:0d:1f:08:87:ad:7f:24:80:93:81:ca:fd:6e:
                    00:5b:be:a6:95:c4:9f:9a:7c:60:a0:ed:79:83:92:
                    aa:a7:93:46:ae:38:2d:12:8d:95:cc:67:ad:db:46:
                    9d:a7:35:cc:14:5b:10:36:86:89:31:f7:6b:df:77:
                    fa:fc:f3:f5:f5:2e:19:ee:cf:c0:97:cd:39:5e:e9:
                    98:1f:23:d8:36:04:85:7d:5b:f1:ff:a6:e9:f1:58:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:38:7B:67:22:5E:82:05:4E:F3:B0:27:9D:61:19:BC:FF:3B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075117a6-0140-3c96-97a8-ec50d1f5382f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:5a:e8:f1:af:2f:e6:60:62:5d:74:46:83:2b:52:5c:74:75:
         69:cc:17:aa:3c:06:53:32:bf:fb:53:1a:aa:14:06:e9:05:c3:
         80:67:bc:80:de:9f:20:0c:c3:5c:85:17:88:b7:95:15:47:df:
         0a:91:41:a7:e9:c0:b3:02:f8:71:0a:3e:6d:1d:e3:6f:48:20:
         ad:79:df:e1:25:f9:77:a5:88:c5:4b:8d:e1:0d:59:ba:c2:05:
         6f:ec:80:0c:8a:73:1e:ba:7d:a2:13:64:b2:a2:16:45:c5:d2:
         d4:fa:12:da:6b:a8:17:72:97:8a:41:ca:ed:e2:7e:cd:e2:e8:
         a8:17:2d:6e:56:2f:d6:03:aa:96:98:20:a9:bb:5e:9b:e3:ee:
         c8:19:79:7b:5d:bf:7a:ad:a7:e8:13:77:84:0e:25:ea:7a:d1:
         74:ff:a0:2a:a6:78:4a:e7:10:65:aa:c8:8c:4e:b2:a6:f1:1c:
         39:96:97:6e:dc:cd:02:da:04:28:76:77:a4:45:89:1d:26:4a:
         92:4a:6f:80:2c:8d:41:e5:7c:0e:b6:4d:0c:df:a3:24:6b:32:
         ac:78:03:21:62:b7:75:b8:e3:8f:2c:2c:ed:18:38:6d:48:0d:
         6e:05:d6:83:15:8b:ae:2f:a6:01:9d:5f:3d:18:fc:db:6c:8c:
         97:03:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:16 2025 by rpki-client