Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14891ba5-0bb2-306e-a125-4ab03d537bbc.roa
File:                     14891ba5-0bb2-306e-a125-4ab03d537bbc.roa (raw, json)
Hash identifier:          cxER+3ghmgfgXrETyHGItS3NGRVptACSHdFhxCiTQLE=
Subject key identifier:   E3:F6:12:B5:23:A8:B6:93:88:C6:B6:C1:F5:5E:7B:2A:DB:94:A8:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CD9C37DD627DA8711D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14891ba5-0bb2-306e-a125-4ab03d537bbc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396585
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cd:9c:37:dd:62:7d:a8:71:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9c9a8862-7873-411d-bfab-0090975cbac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:8f:0a:db:4c:08:c1:04:12:15:7f:d8:f1:
                    19:74:da:03:6f:30:99:ff:68:99:38:8b:3a:58:f0:
                    b1:f0:7b:39:f2:0c:a2:97:4f:b4:b2:90:7b:00:3a:
                    f8:0e:dd:9d:f7:40:58:5e:0b:74:47:e4:47:3b:26:
                    7f:aa:d4:0b:41:35:48:37:cc:9d:35:b6:25:51:d7:
                    44:ee:b4:4b:b5:b1:c8:1e:bb:e6:2e:9f:93:95:e9:
                    31:a0:30:4b:ec:31:4c:5e:6c:6b:7b:47:a3:d8:41:
                    8b:ae:d6:f0:8c:d5:12:2f:97:dd:ce:0c:89:65:92:
                    63:ba:49:66:fb:11:83:79:c9:69:91:27:0d:5e:62:
                    6b:4b:33:97:b1:38:e4:8d:0b:69:0f:c7:99:c2:c1:
                    68:29:30:4d:a6:0f:ac:e4:c9:1a:ce:1d:ba:8d:c1:
                    a9:f2:d1:3e:91:73:82:36:05:0d:41:1d:e5:98:87:
                    a2:6e:24:61:02:89:19:06:37:ec:2c:38:77:ff:70:
                    80:73:75:17:85:25:1b:dd:3b:ad:88:de:2d:72:23:
                    77:f2:01:0a:14:34:13:13:06:d6:00:e7:c4:45:2e:
                    c6:ea:bc:29:06:77:e0:8a:fb:ad:c7:e0:e0:90:b5:
                    c4:4b:57:4f:cc:44:d3:17:82:8a:8f:8a:29:54:d8:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:12:B5:23:A8:B6:93:88:C6:B6:C1:F5:5E:7B:2A:DB:94:A8:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14891ba5-0bb2-306e-a125-4ab03d537bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:75:a1:a5:de:17:4f:1f:22:4e:08:48:cb:94:1c:c2:ba:
         be:f0:56:46:90:bf:b3:9b:fa:89:5a:85:54:24:f6:bc:38:8d:
         7b:a8:fc:f1:0c:25:1b:52:aa:8b:50:87:86:d7:cd:c7:19:5f:
         1c:af:2e:04:5f:98:bc:e1:f1:99:9d:36:f7:ce:e8:74:52:94:
         31:84:00:d2:75:63:2d:82:c3:c6:ab:d6:6e:45:f3:e4:32:33:
         a8:97:52:81:47:9d:93:d3:cc:d1:b7:93:ad:22:5a:2d:aa:3e:
         b4:d3:5b:61:28:ec:37:3d:2b:5b:f8:75:bb:21:c2:9c:1d:4d:
         2a:7f:ae:ed:08:10:e0:dd:3f:af:1c:7f:ec:b7:89:3a:40:a1:
         5d:10:be:5d:3d:e3:88:56:68:62:f4:c3:61:09:59:36:1b:32:
         dc:aa:c1:42:cd:fb:ac:65:83:e7:76:d2:63:32:a1:23:0b:06:
         91:0a:98:32:cb:ce:32:c8:74:a9:43:88:05:6e:d1:39:db:3f:
         a0:a0:3e:87:2e:51:c8:9c:14:0b:50:ad:dd:23:87:5f:2b:51:
         0f:1c:a3:ac:1a:32:a6:41:cd:d2:4f:9d:2d:a0:8d:7a:7d:54:
         72:ab:1d:42:4d:ea:8a:19:e2:26:ed:1b:03:17:52:16:52:d8:
         7c:03:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:48 2025 by rpki-client