Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa
File:                     1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa (raw, json)
Hash identifier:          YCKp5bBiaDn9h1km7h/QHvp6a9MeiDBHpF+09ZM1ySg=
Subject key identifier:   5A:4F:6A:B6:DF:92:D3:94:0A:12:08:A9:C3:26:12:76:3D:29:D0:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF71154E3CE08CCE3F77780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     396611
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:11:54:e3:ce:08:cc:e3:f7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=34bdc8ee-5d47-4468-b6ed-4838d503dc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:25:37:ee:eb:84:8f:6e:a9:ce:9c:74:d7:
                    8b:b1:aa:a2:75:2c:6d:cd:4a:98:2a:c9:43:9f:f8:
                    ff:43:a4:68:4d:4f:57:f0:d6:52:c4:8d:b8:0f:89:
                    5b:08:4f:a6:be:cb:f3:32:2b:54:3e:51:22:df:c3:
                    d0:b9:a7:85:fe:d4:2c:fa:33:62:e4:91:ad:04:aa:
                    e8:65:ac:c7:4a:3a:af:47:34:8b:1e:6d:c7:89:3f:
                    e3:bd:2f:c4:1d:25:f4:95:9d:29:c7:5a:c3:15:1e:
                    14:f5:6b:fa:f8:83:94:1d:55:d5:2d:8b:a8:45:d3:
                    97:00:a8:38:8d:f2:5c:4f:ec:58:6b:53:d9:61:56:
                    b8:0b:47:e0:4f:52:ff:15:6d:e5:5b:b1:45:6b:cb:
                    55:ff:e3:1a:b1:2d:19:b2:e3:bc:92:dc:70:1f:20:
                    37:63:7d:27:f1:59:6d:af:9c:bb:18:36:02:2a:55:
                    d8:1b:1b:f5:35:de:af:1e:e0:42:14:e0:65:43:52:
                    c6:b6:c0:7f:45:a8:c3:b5:73:74:b4:ef:02:e5:b4:
                    8e:5b:f2:a7:d1:0c:40:fd:a9:2c:84:06:24:29:20:
                    ab:5e:70:98:96:d6:b2:09:b4:db:43:84:10:a2:22:
                    bd:21:71:a8:74:6b:1c:f6:fc:5d:bd:ab:cc:23:0c:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4F:6A:B6:DF:92:D3:94:0A:12:08:A9:C3:26:12:76:3D:29:D0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:83:30:fb:d8:b8:cd:ed:b9:fb:c8:cf:3b:8f:db:d2:a9:6f:
         d2:a0:d2:db:2a:d6:13:ee:9f:52:35:9d:5a:1e:5b:6b:03:a3:
         55:8e:6e:88:e6:c7:00:9f:da:c2:8e:68:ea:0e:58:9f:19:64:
         d7:d5:5a:8f:e1:b0:60:3d:e3:89:98:dc:98:5e:a7:15:18:d2:
         d6:f8:c8:d0:69:ac:95:cc:75:b5:34:06:dd:ef:a1:a8:09:60:
         94:19:ef:db:3d:53:dc:15:79:33:e9:18:4c:b4:a9:36:ae:94:
         32:2a:c9:85:08:8a:f8:48:c0:9f:59:4a:7e:37:bb:cb:65:ca:
         ec:00:98:f0:ec:33:cc:59:d6:ae:68:fa:64:96:19:0e:74:8b:
         b9:0b:02:f7:88:69:ca:89:5d:c4:1e:93:84:b0:45:f2:c0:a7:
         bd:22:c4:bb:69:49:3e:f3:dd:aa:e0:dc:ad:32:89:4a:34:6a:
         50:fe:c2:13:ee:08:67:dc:45:93:11:05:6c:9d:f0:14:c4:b3:
         cc:0b:bb:09:84:e4:f0:e2:ed:81:3a:96:7e:0e:c1:b9:fa:fe:
         e6:b2:54:1b:32:a0:db:2e:16:d8:09:0e:5e:4c:57:c6:ee:41:
         98:86:b2:49:4c:82:e9:1c:6c:e5:41:03:e6:35:b2:90:41:6c:
         4e:89:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:34 2025 by rpki-client