Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa
File:                     23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa (raw, json)
Hash identifier:          cSVC/qFtuG/TOkvEEXIvLzFOwaoO2s6o4/pifi5tgxw=
Subject key identifier:   86:47:AB:63:E7:D3:47:A1:BC:C9:79:90:FB:B8:B6:9E:FD:2E:5E:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E262C649EC9C3EE37180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396562
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e2:62:c6:49:ec:9c:3e:e3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fa7de258-9fe5-4330-80c4-b824a3262578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:43:c8:b4:2c:2c:e4:c8:75:2e:47:c3:82:
                    0d:8a:89:55:85:6c:84:b2:0e:60:03:69:3a:15:28:
                    0c:d9:eb:4f:42:7f:1d:95:b0:e1:e0:83:28:30:93:
                    39:05:8a:cc:52:80:b2:e8:ab:e7:4e:fd:a6:fb:88:
                    5e:75:dd:ed:ec:83:21:d2:4d:74:28:9f:d9:8b:25:
                    7f:d8:96:af:d3:40:4c:a9:67:35:ba:6e:a8:ff:2f:
                    ee:85:a4:3b:c3:0f:1a:d6:8d:fb:95:23:59:1c:d6:
                    a5:79:27:81:e1:55:85:e0:5b:49:c4:0b:50:6a:ba:
                    f1:40:e4:f9:f3:ea:94:37:c1:83:b1:9f:4f:c0:a2:
                    73:ae:bc:e8:21:b1:50:18:44:63:e8:25:51:25:17:
                    10:4c:e7:94:3b:82:78:5b:9a:13:61:18:53:31:6a:
                    7b:c7:f1:b4:da:0f:fa:57:f1:f3:39:15:1e:5c:c5:
                    69:e1:dd:46:d3:cb:2f:1c:5d:ae:da:07:dc:cf:69:
                    3f:3e:ff:59:b4:bb:1d:ae:70:31:e1:7c:17:f4:78:
                    52:bf:56:d7:86:87:c0:fe:25:b5:05:29:18:51:1e:
                    af:a6:d8:c0:9b:c6:38:7d:44:6d:87:4c:dc:48:73:
                    22:67:43:06:a3:8a:c7:bc:6b:b3:c6:e1:1c:32:7b:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:AB:63:E7:D3:47:A1:BC:C9:79:90:FB:B8:B6:9E:FD:2E:5E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:fa:7d:67:0e:ef:67:c7:50:8d:b1:f1:67:c3:8b:5c:77:
         1e:12:72:52:75:21:84:6e:d9:0f:bd:92:20:7f:1c:03:86:ac:
         ab:f0:36:d3:d3:da:7e:7b:0e:25:68:7e:13:4c:3d:7d:cc:a7:
         43:3d:ac:23:85:87:4a:b9:b2:a2:6d:0b:1e:06:ea:a6:99:f0:
         d0:32:19:0b:b4:c0:c4:90:2e:5d:3a:10:2f:98:2e:c1:e4:16:
         c4:f1:ad:86:96:de:13:ec:ae:6f:3f:1b:c3:11:43:0e:8b:c7:
         95:a9:e3:1e:3c:24:41:0f:a2:56:28:5b:16:70:57:3f:08:b8:
         c3:57:b0:d4:fb:7a:c8:8a:b3:79:b1:11:ca:c4:f2:c6:ae:7d:
         bb:bf:b0:43:31:2c:af:45:d8:63:31:10:e5:55:25:95:8f:6a:
         04:fd:eb:85:7c:1b:30:ef:34:80:99:da:b8:3e:e9:e9:11:32:
         5e:fa:cc:c1:96:0b:52:02:9c:79:f1:25:f8:f6:2c:46:a6:37:
         be:9f:c9:b5:56:1a:cc:fe:e1:00:d5:20:66:76:ce:7b:af:e1:
         bc:5f:01:91:01:35:62:46:7a:3f:ec:d9:16:83:a2:32:e8:5c:
         d7:f2:75:a9:56:88:ec:2b:1e:e2:dc:8f:2e:91:89:00:2b:fc:
         de:13:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:39 2025 by rpki-client