Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17cd5492-62c0-3e6a-9a04-e8bde6ba1b4f.roa
File:                     17cd5492-62c0-3e6a-9a04-e8bde6ba1b4f.roa (raw, json)
Hash identifier:          gA/YbQpI+Rfvj7F40xOkC3oq5xoI9NRpfBoW9Ggp8wU=
Subject key identifier:   56:1A:69:93:5A:20:3A:3E:AC:2E:45:4A:97:F1:98:8D:8D:6B:AF:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D618EF0EA58CA8AA40C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17cd5492-62c0-3e6a-9a04-e8bde6ba1b4f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396605
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d6:18:ef:0e:a5:8c:a8:aa:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=855376ef-014f-441d-977d-5e1e73203192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:29:68:7f:23:68:02:c9:b2:57:70:18:84:
                    e7:e9:bc:a5:be:a3:2c:99:00:ad:85:2d:d0:1d:5a:
                    18:16:e1:49:89:b7:be:61:27:78:8a:42:3b:b3:ee:
                    2a:e7:4b:a6:54:28:33:18:fd:0a:7b:fb:c9:32:8c:
                    fe:4e:47:cf:92:89:b2:f3:db:1a:48:05:b0:b5:2f:
                    e4:9c:bb:b3:c8:fb:1f:3f:dc:ae:40:2d:08:ac:8f:
                    64:4f:58:1b:ca:3c:d7:c1:45:23:b3:62:9e:4d:fe:
                    ec:a0:2b:6c:5e:d7:28:3c:e8:a6:b7:fb:39:05:3d:
                    b2:56:96:fd:b2:da:1e:e8:90:6a:83:ba:e8:11:0a:
                    8d:ab:86:45:43:0e:49:1d:bc:87:bc:b7:1b:d1:08:
                    21:81:95:82:82:22:a3:03:c2:4d:37:f0:8b:d2:21:
                    d7:98:52:4c:4c:63:77:04:6a:39:ff:0a:d0:ac:ce:
                    af:5d:0d:4d:5e:fe:55:89:dc:33:d6:e7:5f:d6:c4:
                    12:da:89:b9:20:59:56:01:89:96:88:d8:ad:3f:04:
                    aa:cb:32:5c:ab:2b:22:04:66:72:0c:73:af:83:04:
                    27:95:bc:cb:c7:f4:e6:1d:f6:3f:d8:27:39:b5:e1:
                    5f:13:02:ea:2f:e8:76:ed:1c:a8:81:06:10:fb:06:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1A:69:93:5A:20:3A:3E:AC:2E:45:4A:97:F1:98:8D:8D:6B:AF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17cd5492-62c0-3e6a-9a04-e8bde6ba1b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:e6:0a:b0:2e:95:c8:89:16:d0:2b:4b:bf:12:95:4e:79:
         af:0b:f9:8e:7e:3d:9a:4f:d1:ea:94:29:dd:fb:be:08:f6:71:
         df:5c:25:bf:5b:1a:33:ac:17:88:82:fa:40:c9:4e:a7:ec:62:
         b2:d2:66:8b:d6:48:b1:18:e2:7d:f9:69:0b:a9:1b:87:a5:10:
         17:7d:10:62:b1:60:4d:8b:e2:fd:d5:28:7b:fb:fa:db:7a:47:
         2e:9e:29:84:87:c6:25:18:45:77:bf:62:62:da:69:cd:27:8c:
         53:c8:9c:93:4a:ff:77:3f:45:85:52:47:41:40:43:9c:59:33:
         cf:15:13:c9:73:29:4b:9a:05:82:9c:ac:7a:5a:bb:73:3d:a4:
         d1:6a:9f:22:d1:26:9d:5b:48:f1:66:ae:45:b1:9d:1e:db:2e:
         bb:98:3b:37:f8:ec:b8:b0:19:87:4b:e6:22:73:6d:d5:23:e6:
         78:24:bd:cf:62:58:cb:53:04:87:63:83:91:09:36:56:7d:62:
         2d:24:1f:12:e2:4a:b3:3f:f0:f4:1f:6f:08:db:08:ac:78:46:
         e1:ae:06:45:cf:78:3a:85:0e:18:b6:5a:04:ef:d4:bc:ea:44:
         ea:1b:bb:3a:fc:f3:3a:26:74:a7:ac:b5:83:da:7c:9e:34:2c:
         2e:f1:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:52 2025 by rpki-client