Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa
File:                     0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa (raw, json)
Hash identifier:          pU1F07yOCg2sD4ni0IpW+Tq/T4HS0ZTyC9viCEWqj9c=
Subject key identifier:   4C:0D:09:0E:CD:DF:3C:BF:9D:7E:27:85:66:CD:EF:6E:60:4C:1C:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CD1EFE4D3FB98DEE2500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396606
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cd:1e:fe:4d:3f:b9:8d:ee:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8f344fe2-c2a9-4e6c-bc77-0bac9448f4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:f1:c6:57:86:d9:7b:02:94:ef:03:e3:35:
                    9e:a2:ec:ff:57:b0:0b:a6:b6:26:c4:99:8a:bf:9b:
                    a1:60:f3:14:6f:14:eb:3c:67:24:ca:a6:7e:17:e2:
                    5c:ee:bd:a9:0f:99:d5:c9:39:d8:a3:0e:d8:d6:34:
                    50:7f:e8:d4:60:13:80:49:cf:1e:2e:90:eb:70:7c:
                    5f:db:20:78:8f:bc:5e:30:0a:bb:98:d3:32:97:34:
                    84:ab:b6:51:dc:52:37:f0:a6:f8:45:42:f7:d3:ac:
                    a2:53:b8:d0:9e:ce:a6:28:15:08:f7:3c:35:00:3d:
                    71:4f:30:e3:c5:ed:97:80:10:aa:7a:02:bb:19:47:
                    20:cd:f6:d6:10:0f:9d:c4:20:52:b0:ae:89:a0:94:
                    9c:30:aa:a3:4a:44:07:1f:bd:96:3c:77:5a:97:ef:
                    81:5e:67:f8:52:e2:a6:b4:a0:e9:1e:16:0c:4f:e1:
                    a3:07:f8:1f:48:a5:7d:d9:8c:78:30:78:86:0a:63:
                    58:d2:31:b2:32:6a:c2:6e:c5:f5:81:28:5b:ea:77:
                    23:9f:35:8c:9c:9b:18:fc:56:d1:d8:c8:97:c9:ae:
                    0e:33:7e:6a:0e:e0:40:6e:48:8d:c4:f1:d0:70:6c:
                    4d:ae:fe:f6:28:06:0f:f7:57:93:44:dd:4d:e2:66:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:09:0E:CD:DF:3C:BF:9D:7E:27:85:66:CD:EF:6E:60:4C:1C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:7f:96:31:84:e2:20:c9:58:66:8d:a0:79:4b:c1:f3:de:
         0c:dc:3a:a3:e1:b3:a2:0e:03:f2:ad:aa:8c:2f:63:f9:87:f3:
         b4:1a:b9:9f:bd:5a:20:2d:06:6a:33:d8:a8:d0:4b:27:8a:21:
         11:12:53:5f:a8:40:94:cf:c1:54:18:48:fd:4c:ee:91:76:e2:
         38:9f:bb:c4:0f:0e:1b:00:65:dc:23:cc:c4:c0:9a:7e:91:94:
         3b:a6:6b:4f:cb:cc:1a:7a:d4:ba:11:b6:6e:3d:ca:62:33:d2:
         5d:ed:f5:12:da:d6:a5:84:a8:00:87:2b:38:00:9f:b3:8a:61:
         b3:37:3f:24:1c:09:c2:45:5f:89:f6:12:76:d6:d5:c6:a9:1c:
         85:47:7f:1d:3e:df:71:88:49:27:08:05:70:63:de:41:db:3c:
         9f:7c:40:7e:7e:34:63:df:7b:2d:b7:7e:d6:13:db:a3:83:bd:
         2f:87:d7:a9:5a:b0:0a:65:6f:2e:23:11:c4:b9:c4:ae:d1:06:
         32:cc:f4:68:93:13:6a:01:0c:5c:4f:cb:3a:88:ad:25:49:3b:
         44:40:82:ec:44:71:0b:b3:f0:4a:55:1f:31:ed:84:d0:4c:ee:
         6c:c3:89:bd:db:0c:6b:06:aa:2f:80:67:19:4a:06:fe:9b:92:
         6d:3a:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:59 2025 by rpki-client