Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa
File:                     0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa (raw, json)
Hash identifier:          oRvJrJDvPHQSg2YdvHdTBMUJMZbHZkq2zdf4nPY4kTw=
Subject key identifier:   AA:FE:16:66:04:F0:0D:06:1B:92:EF:08:F4:0B:0E:6D:DB:05:10:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FA979C1010A89C5A3C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa
Signing time:             Tue 19 Aug 2025 12:34:13 +0000
ROA not before:           Tue 19 Aug 2025 12:34:13 +0000
ROA not after:            Mon 17 Nov 2025 13:34:13 +0000
asID:                     396581
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fa:97:9c:10:10:a8:9c:5a:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:13 2025 GMT
            Not After : Nov 17 13:34:13 2025 GMT
        Subject: CN=965a0ffb-1652-40e2-b856-445fe7127e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:2b:21:5c:1b:72:08:60:73:f2:83:c4:aa:
                    18:af:13:96:28:05:ce:de:75:e9:d6:45:39:19:f8:
                    18:ac:8c:b5:ca:15:b6:c4:23:1a:85:69:c8:11:20:
                    a7:6c:4f:c1:df:da:da:69:af:cc:79:58:92:68:e6:
                    8f:a1:18:24:92:10:bb:ff:98:ac:0e:88:0a:57:53:
                    bc:d1:19:fa:78:cc:2c:ef:c1:d6:03:c6:93:fc:2d:
                    79:cb:99:4c:b2:07:cd:b6:e7:7b:10:37:0b:81:64:
                    ca:db:76:c2:51:5a:e3:cf:dd:08:d9:4b:f4:de:ff:
                    b9:47:ce:3e:3d:63:0d:f4:d6:37:66:5f:18:b7:03:
                    7e:1e:8c:ed:a9:52:fc:c0:1d:59:24:eb:45:12:76:
                    b9:6f:2d:1a:e0:2e:0f:51:86:60:99:86:c6:ed:e8:
                    0d:26:a3:3b:50:d2:54:5f:56:b1:8f:fc:2f:cc:e6:
                    18:70:30:fc:a8:38:fd:1c:83:f2:23:d2:77:da:83:
                    74:82:34:ee:58:60:a8:c9:d6:d6:bb:43:18:53:ed:
                    35:02:18:3c:1a:86:76:50:ac:eb:da:5e:36:cf:4b:
                    2b:7f:92:b4:4e:65:f8:01:8f:76:2d:d2:98:79:12:
                    6f:9d:9f:7b:d0:73:ac:3e:c7:ea:93:30:d8:c4:6a:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:16:66:04:F0:0D:06:1B:92:EF:08:F4:0B:0E:6D:DB:05:10:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0760ae27-6fc0-3fd4-bb49-52c20bf4be47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:d9:8d:08:e2:d3:70:33:92:cb:51:ca:34:77:05:24:1d:
         ff:7e:98:16:6b:6a:99:a1:4d:dc:3e:44:69:db:29:26:26:6e:
         6c:07:2d:46:1f:c4:7e:64:b6:f4:a9:98:8b:cb:4d:b2:a1:65:
         db:f3:71:2f:22:cc:dc:0e:a8:42:45:f8:f8:2f:e1:46:49:fb:
         39:82:66:4e:e3:6b:2e:37:82:4e:1d:76:f1:1c:63:57:66:f3:
         71:7d:ca:8f:b0:39:ba:92:82:a4:d2:ba:69:70:2f:a1:42:84:
         bf:7d:54:90:69:78:20:12:03:06:f7:a7:77:6c:b3:6b:72:a1:
         90:0e:02:23:52:44:4d:11:92:17:5a:d0:2e:df:7b:95:8f:98:
         54:6b:44:c9:cb:57:bc:8e:a5:a1:08:3f:6f:f7:d9:ca:54:19:
         4f:f6:b4:e2:7d:62:fc:be:1a:bc:1a:f1:d5:3f:36:a2:fd:b6:
         f5:63:8b:01:cc:ba:21:7a:76:3f:e3:28:d4:f4:31:8e:4a:20:
         11:1e:9d:d5:be:6e:04:f1:1c:c6:5e:25:59:ef:15:a1:91:24:
         cd:2d:26:4a:dc:92:05:98:34:3e:91:ae:61:6f:a8:86:b7:df:
         39:72:65:ce:ce:fd:ba:2e:5e:7f:f0:15:fa:5b:88:fa:3f:27:
         e5:5e:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:42 2025 by rpki-client