Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa
File:                     086b2275-7c7b-31c8-8a5e-95b24252749e.roa (raw, json)
Hash identifier:          HJItPgR9A5mofvoTadcXCN5R5JypAUvyIn9zJDCmk7s=
Subject key identifier:   75:05:20:7E:CC:4A:C0:D4:BF:54:2E:D3:94:A9:6B:2B:01:87:F7:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FD94F61CB78D9C413640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20172
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fd:94:f6:1c:b7:8d:9c:41:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c5f81386-f4f2-40a7-840f-0fc41c7dc1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:67:01:87:33:ea:b3:fa:89:4f:48:66:76:
                    d3:62:4e:89:76:e4:8a:9b:e6:69:85:0e:17:ca:ac:
                    4b:dc:d8:9d:bc:a7:4d:a7:63:d2:5d:5a:0b:6b:1c:
                    3e:87:ed:32:84:2f:9e:f6:35:3a:dc:34:6d:2f:fd:
                    4f:10:a3:7f:43:bb:9d:5c:21:da:98:cb:65:65:3a:
                    a4:0d:ba:a2:50:0b:f2:b6:a1:96:ac:10:f4:60:f6:
                    6e:8e:c3:50:36:8f:ad:b5:6c:ee:cd:33:d4:1b:6f:
                    7e:96:a3:9e:e4:5f:16:70:64:66:64:7e:95:2d:f7:
                    75:fd:7f:49:01:9b:82:25:00:24:ac:36:66:63:fa:
                    a4:b6:2a:56:b8:6a:b0:49:be:a5:18:95:ad:12:c6:
                    92:ce:ca:b6:6c:0a:46:4e:5f:70:de:64:4f:47:fd:
                    8c:80:dd:79:e8:58:cd:aa:70:9f:72:45:8f:fb:df:
                    46:6f:0c:38:05:c2:f9:c9:c6:bc:43:c1:e7:f2:d8:
                    1b:2c:08:c1:75:ca:57:4e:8a:28:2f:7f:7d:8a:1d:
                    75:f0:20:2b:4d:3c:c9:70:85:fe:0a:c9:14:8d:fb:
                    0c:ea:9b:5c:5c:5e:dd:63:2a:71:8b:f4:fd:16:45:
                    be:8a:2a:6d:ca:7b:c5:ee:8c:8a:ef:ff:9f:c4:95:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:20:7E:CC:4A:C0:D4:BF:54:2E:D3:94:A9:6B:2B:01:87:F7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:71:52:4b:24:63:29:1b:a1:da:bc:67:d7:f9:f7:96:9a:
         74:96:ee:75:85:4c:a5:f0:f9:be:35:18:7a:0b:ce:32:b0:db:
         79:77:08:e3:ff:81:00:33:3f:4a:f0:cb:ee:2a:ca:67:06:af:
         c6:09:2e:fd:bf:d2:75:2d:91:18:b4:00:b1:cd:e4:a7:e4:eb:
         6e:31:eb:cc:69:7e:b8:eb:cd:56:a7:c6:61:78:01:f0:a5:e6:
         91:12:e9:3b:8a:a8:3b:63:1c:31:66:d3:45:4f:fe:60:ab:b2:
         2d:98:c1:84:69:cb:2f:ae:fa:11:e5:6e:8d:51:e4:b7:84:f2:
         4c:e9:16:89:b6:b9:8c:c6:24:f1:36:c4:f6:40:38:9b:c6:1c:
         09:81:03:0d:d6:d7:ac:99:d9:10:e3:5b:ac:2d:19:73:aa:51:
         66:56:80:4f:fa:69:b8:83:ab:18:13:ea:e2:ef:5a:b4:48:3b:
         f6:c2:df:c8:ce:2f:84:34:e5:23:09:22:0d:3d:45:da:fb:c3:
         a4:50:81:8b:db:05:cd:86:58:93:61:2d:d9:29:bd:a0:6a:6d:
         90:7f:f6:83:5d:a7:11:c0:b3:1b:56:6f:34:d0:7c:eb:e8:67:
         e0:6c:4d:64:ae:6e:e2:4d:ad:a9:31:eb:01:98:61:e6:99:13:
         82:6b:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:22 2025 by rpki-client