Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa
File:                     1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa (raw, json)
Hash identifier:          x1r/mW2b43rktsn5XOYkCadSY/nEJGlMQZUh53oTXMA=
Subject key identifier:   E9:9F:4E:99:41:F0:AD:96:FF:9F:0D:B9:8F:72:3A:C0:66:91:D4:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EAC3D77ECD0D60730550
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396553
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ea:c3:d7:7e:cd:0d:60:73:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=82f07514-0494-4499-9343-817b7fa440a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:0a:64:f6:51:1d:d6:6f:8b:03:a5:30:a7:
                    47:e0:d1:e8:9b:54:82:6a:d1:b0:6d:01:08:ac:cc:
                    cc:eb:0f:f5:04:9e:82:c9:3d:e4:05:f7:5a:17:a1:
                    6d:01:a5:4d:44:c8:56:4a:56:96:51:01:a1:9f:75:
                    7b:5c:32:6d:51:f9:b2:f5:5e:de:de:8c:b9:43:6b:
                    94:15:93:2c:4f:01:51:10:ef:9f:e9:43:9a:4c:82:
                    7d:23:b0:0e:67:02:09:3b:46:2b:31:5c:4a:db:f8:
                    5c:e0:53:7a:70:4e:3c:f2:40:e7:fe:a5:70:89:ee:
                    03:61:4d:89:71:04:5d:4c:1c:34:09:ca:68:82:94:
                    97:c0:f9:a6:0e:92:ca:2d:30:6f:e3:d1:af:78:54:
                    45:ac:f4:af:66:a5:7b:94:8b:09:8c:5f:03:ab:36:
                    13:47:14:dd:40:13:8c:f4:72:23:d9:ea:cc:a4:49:
                    a1:fb:fa:33:7c:18:a1:a2:13:32:52:84:53:6b:ef:
                    a7:ad:5a:79:e2:69:dc:6d:17:f6:d5:8f:47:6b:71:
                    8f:49:64:de:c6:db:66:ac:eb:4b:e6:79:32:6f:a1:
                    5b:20:96:fa:b1:ff:ea:82:72:83:95:36:dc:e0:0b:
                    5e:5d:cf:4c:e1:93:b0:c9:a3:fe:b1:7f:4b:de:2d:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9F:4E:99:41:F0:AD:96:FF:9F:0D:B9:8F:72:3A:C0:66:91:D4:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:59:c3:48:ad:d8:06:38:6f:82:c9:2a:36:5a:c7:47:9f:
         72:87:81:8f:f5:94:2a:a9:24:2f:78:bd:e6:f4:73:0a:3a:0b:
         a9:19:b2:d2:e5:a4:8a:5c:87:6c:1a:1d:c6:0e:77:8d:da:34:
         96:5e:ff:f8:fe:56:18:c7:e8:f7:fa:37:0e:e7:ad:f3:4a:2d:
         db:be:3f:a8:d1:c3:1a:a7:34:91:65:24:e3:18:79:67:2b:6a:
         18:3a:95:d7:ce:b5:f6:6d:c3:8d:4d:91:16:d9:dd:b0:35:d3:
         69:5b:5c:18:c5:72:f7:eb:ce:16:44:06:3d:3c:10:2e:56:0c:
         14:40:0e:e1:f3:db:c6:95:44:49:34:2e:8a:2a:17:74:1d:cb:
         48:1c:b6:7c:de:e2:45:c7:c9:12:5f:16:4c:fb:39:ba:5a:f0:
         21:23:93:83:25:58:09:a3:f6:b1:63:d0:f0:02:27:94:a6:51:
         c3:2b:e6:4e:80:45:a8:ad:bf:8f:01:14:07:1d:2a:2d:0a:4e:
         6c:ee:31:83:61:12:42:d9:85:96:30:58:0d:2e:a2:55:3e:eb:
         0b:04:03:3b:bf:ed:66:2f:03:41:39:b6:96:e9:03:6f:d6:98:
         8c:1a:5c:b7:8e:94:ca:ac:5f:80:49:1e:69:77:6b:30:4e:40:
         e1:e9:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:18 2025 by rpki-client