Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa
File:                     0f242d83-f120-34df-8667-0ba7250752b6.roa (raw, json)
Hash identifier:          CkTIhwb7uLti1sVDjJBW+zkSOknMwMkZUmRrpJJ6K3w=
Subject key identifier:   98:61:E3:43:52:78:2B:E0:66:E8:D9:25:E4:86:D8:06:7F:85:40:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC5115B791E61973B7F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     396562
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:51:15:b7:91:e6:19:73:b7:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=8c162df8-a2cf-4c6b-b3fa-09c0ad608776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:2c:ed:e3:47:d8:f7:24:3e:45:30:07:c1:
                    69:e4:11:12:77:f9:ae:68:7e:cb:65:7e:11:8c:a0:
                    5e:79:30:25:9d:d0:47:d8:0f:96:c5:1e:5b:37:09:
                    18:90:18:e0:56:85:86:2b:2b:bb:d1:19:60:4f:6c:
                    45:cd:85:ab:89:12:08:fa:c0:fd:5a:78:a0:cf:18:
                    17:db:43:8d:11:f6:7c:0c:fa:db:16:0e:1b:6c:ce:
                    b9:ca:5f:1e:1f:11:71:16:8b:b3:e5:97:df:ef:f1:
                    bf:3c:d3:e1:6d:ee:37:2b:d8:d1:f8:05:4f:14:9a:
                    37:88:fe:36:96:eb:44:4f:f5:bc:89:97:98:33:f9:
                    69:7b:d7:9b:7e:84:c9:23:b9:2f:00:ee:86:b0:7c:
                    94:95:46:78:54:8a:06:e8:72:2e:c6:49:6d:67:b3:
                    96:f5:c4:cc:0f:51:cc:dc:17:27:f3:67:f4:6b:58:
                    6b:9e:5e:6a:ed:46:78:5b:38:c2:e8:b7:39:31:5f:
                    e4:53:0d:6a:8d:be:97:47:e9:bd:65:0b:e2:99:8d:
                    e1:26:69:27:71:09:ba:44:0a:34:d0:e3:0f:21:53:
                    c7:95:3d:e4:7a:64:3b:e2:83:0e:f9:b6:c5:ae:ce:
                    f6:1a:7c:76:62:2c:5d:19:ea:d7:7d:d3:b2:eb:4b:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:61:E3:43:52:78:2B:E0:66:E8:D9:25:E4:86:D8:06:7F:85:40:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:0f:5f:90:bb:45:22:a6:40:48:b8:b4:8e:d6:c1:f2:e2:
         dc:63:e1:eb:94:89:9f:69:56:b9:06:28:dc:5f:07:06:c4:f5:
         7b:34:ff:fd:d3:2f:27:31:ee:12:79:2b:f3:22:e0:d2:98:81:
         e3:76:f9:33:53:d3:77:a0:c4:7d:7e:01:8e:31:46:1f:04:ec:
         0e:fb:15:34:51:8f:9b:c9:29:e0:62:e2:ca:e7:6e:61:09:e0:
         87:11:2c:e2:c3:fa:e6:58:e8:9d:d8:79:77:cd:7b:d3:70:28:
         0b:33:14:d1:20:f8:f0:bb:4a:d3:6e:ca:00:ca:e1:b4:97:bf:
         36:b7:96:9c:43:c2:60:81:74:5a:2d:b3:80:dd:04:4f:d4:68:
         ba:e5:13:94:83:f6:90:3c:ed:1d:bc:32:3c:4c:12:a8:6d:1d:
         a4:c2:2b:94:17:82:c8:5e:cb:59:b8:80:f6:36:9c:c5:d7:e7:
         a7:38:e4:41:f5:85:94:a4:be:b6:c3:f2:47:a7:5b:be:48:90:
         d9:03:2a:4e:20:f6:d3:f8:c9:a2:70:45:eb:d5:2d:b4:c0:ff:
         53:08:9c:ca:0d:9f:01:02:0a:81:05:35:06:bb:ab:6c:b6:8d:
         8e:6a:43:ce:1c:be:91:b5:de:55:0a:26:4c:b3:7c:80:b5:10:
         f9:15:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:27 2025 by rpki-client