Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa
File:                     1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa (raw, json)
Hash identifier:          gQySuSt/fHbDc9WhkfoVz/q9uBvn3xIRlLOn5w2zvMw=
Subject key identifier:   2E:F8:B2:33:48:73:B7:47:E8:75:B9:F8:AD:5B:95:01:FC:41:73:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FD0E9E1E910E877AD5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa
Signing time:             Tue 19 Aug 2025 12:34:14 +0000
ROA not before:           Tue 19 Aug 2025 12:34:14 +0000
ROA not after:            Mon 17 Nov 2025 13:34:14 +0000
asID:                     397199
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fd:0e:9e:1e:91:0e:87:7a:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:14 2025 GMT
            Not After : Nov 17 13:34:14 2025 GMT
        Subject: CN=dc15eb5c-dc31-4e76-93ef-df275b25eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:3a:e6:3d:76:2d:24:84:0f:a0:8c:32:f7:
                    8b:d0:6d:e3:2a:dc:71:52:2a:28:5a:b4:e6:ea:1a:
                    72:aa:73:15:49:99:3c:87:75:f2:fe:ef:d3:7c:74:
                    66:6f:31:72:db:01:65:4c:8f:aa:32:44:00:6f:90:
                    59:d8:92:bd:bf:22:09:85:10:cf:8e:9e:0d:53:c3:
                    e0:85:bc:1b:c7:3a:64:dd:d2:06:0d:9b:fb:ac:0a:
                    cd:a5:11:5a:fd:8d:2e:5e:a1:48:c6:33:74:cb:30:
                    c3:f6:5b:2e:7b:81:46:93:2e:c9:33:7c:1b:7b:78:
                    17:7c:fe:af:68:7a:aa:dc:b2:4a:83:a6:76:82:47:
                    b5:e4:3d:cc:14:a6:77:55:e9:18:b2:64:71:84:70:
                    d4:00:08:7c:b2:3a:88:a9:b7:a6:74:d0:f4:aa:b2:
                    3a:99:ca:ad:f4:c2:e7:57:93:4c:1e:bc:3f:28:84:
                    e6:90:c3:53:cf:95:b5:ef:73:b5:29:9a:6c:64:d6:
                    8f:a7:6a:82:d7:ee:e9:fb:47:94:db:9e:cc:37:ff:
                    05:34:89:13:61:57:80:a7:c2:91:4a:ce:ab:4f:2b:
                    7c:a1:23:e3:f0:a8:08:e0:ce:ef:51:d2:62:10:e6:
                    0a:81:05:67:ac:47:35:b1:1e:c7:25:cb:ce:ab:ca:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F8:B2:33:48:73:B7:47:E8:75:B9:F8:AD:5B:95:01:FC:41:73:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e13af31-7f5e-3a6a-afa7-6d366ea95c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:dd:a3:15:0d:d4:53:0a:0c:9f:fb:f1:75:ff:9a:5f:3d:e1:
         40:49:30:d3:df:e1:fc:62:8b:fc:d1:a5:b9:c3:7d:5e:eb:93:
         91:58:f5:f9:c2:db:22:df:25:4e:e4:fa:50:9a:f7:61:08:36:
         1c:36:ba:b5:e7:39:63:c0:42:4e:cf:6e:72:52:0f:e0:e3:9a:
         d5:85:5b:6a:d7:91:7b:f2:8f:3f:54:09:e0:29:b7:de:43:5a:
         25:a0:27:9a:9d:66:ac:6d:02:8e:71:35:49:68:e5:ae:0a:25:
         1a:46:b5:89:65:da:40:63:52:6e:6c:a1:09:de:e1:28:4e:55:
         6b:0b:14:11:82:8b:ae:be:4a:94:2b:c7:a4:1a:1e:3d:b8:a7:
         6f:d4:c8:12:23:e2:c8:61:62:f6:f9:75:a2:38:9e:15:b4:45:
         88:94:97:25:9b:95:9b:6a:fe:f0:b6:60:1a:76:e0:17:a8:7f:
         ea:e5:79:9e:17:8c:78:c9:8b:57:5c:c4:ad:f8:78:a6:08:91:
         c9:b3:ad:04:a9:2b:10:b8:14:32:81:ad:66:20:d2:aa:84:40:
         f7:a9:07:6c:33:44:59:2f:e6:fa:60:e5:15:86:c6:00:48:64:
         b8:a8:65:a6:62:0e:82:54:05:f3:17:5c:8a:83:69:61:e8:fd:
         5a:89:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:08:11 2025 by rpki-client