Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa
File:                     30406605-4c67-37ce-aa10-4258fa27d89b.roa (raw, json)
Hash identifier:          7RYvWCuIUqNyA5fxSbpr/TwL2zEstBPBrirm6D2B0Cg=
Subject key identifier:   FD:36:5E:F6:4D:94:89:0A:80:F9:8F:24:6C:32:A5:CD:03:0D:24:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F7390483211E69D0D94E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396826
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f7:39:04:83:21:1e:69:d0:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=db255906-489b-48ab-a4b3-9e5b3ea691a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:14:04:a7:24:c8:ba:09:7b:a1:d1:50:80:
                    72:4b:30:92:3c:dd:aa:dd:b8:f6:5b:6c:0e:35:b2:
                    3f:e7:e7:5c:56:e6:eb:51:9f:70:63:e1:3c:1b:48:
                    bd:e2:99:70:7c:9e:9a:94:39:cd:fb:53:e0:07:db:
                    76:fb:9f:ce:e4:73:3b:06:18:d8:f2:98:8c:41:ec:
                    fb:1a:b2:70:97:4a:31:ad:97:38:13:15:8d:9a:ab:
                    74:e0:f7:68:b7:b3:2a:ce:ed:54:b8:8d:73:e9:ac:
                    1c:32:59:4f:a0:af:50:4f:32:85:43:b4:5f:45:77:
                    47:c5:54:4e:6e:0f:fe:4e:34:7b:42:28:84:21:0a:
                    76:4b:61:4e:be:ca:30:85:3a:37:24:c9:ae:70:b3:
                    5b:60:03:63:3a:16:c8:54:5d:9a:48:cf:b5:16:a6:
                    2e:b6:aa:7e:61:71:1a:04:3a:dc:15:14:c5:bd:33:
                    a0:66:31:ea:ea:85:c5:d7:17:dc:aa:b9:f1:b7:06:
                    7c:b9:77:79:21:74:d8:7b:34:96:9f:76:d1:38:32:
                    f6:c9:4c:66:5c:20:d1:49:06:25:80:9a:69:5a:50:
                    75:93:23:9a:54:b7:fb:9d:1f:6a:94:b3:30:2a:90:
                    de:d5:07:51:63:86:f5:df:71:6a:b3:12:39:73:dc:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:5E:F6:4D:94:89:0A:80:F9:8F:24:6C:32:A5:CD:03:0D:24:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:3d:28:1c:b3:72:d0:90:02:d2:34:17:69:87:26:4b:76:83:
         c7:71:e6:c4:6d:48:2e:08:54:fc:10:c4:e7:0e:91:58:2e:d1:
         1b:fb:c9:dd:36:b5:6d:98:7d:09:a9:f7:35:9b:7b:12:e9:f0:
         41:22:17:e0:c5:24:0d:df:3e:2a:ce:a8:de:5e:7e:a3:e0:be:
         41:c9:7e:e9:e9:09:00:07:1a:c5:a0:02:9d:8e:37:07:0a:04:
         61:58:e7:aa:e2:03:7f:a9:45:a6:93:21:a0:31:14:55:78:6a:
         f2:1a:80:33:e7:e7:e6:66:47:ac:8e:72:1b:36:83:e1:58:70:
         2d:3a:54:be:fe:84:c0:6f:e5:88:4e:22:09:cf:ed:88:98:4d:
         f5:53:7f:b3:d9:17:b5:35:e1:8c:d7:ef:70:64:cc:31:59:7e:
         03:c2:c4:c0:3d:a3:2c:83:bd:77:a6:bc:31:e1:b6:e3:d6:1a:
         5a:32:bd:5f:2c:22:a1:e5:e8:6b:f8:d1:c7:5c:10:36:bf:8a:
         5d:42:1a:ac:cf:96:b4:23:a0:95:14:7f:01:38:9a:21:57:b9:
         be:b9:f1:5e:13:59:0e:db:4b:56:52:8f:de:4a:32:1f:e8:51:
         0b:2d:5f:0f:3d:28:9d:ad:ef:a5:33:bd:b6:43:86:e8:a2:b1:
         a1:58:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:17 2025 by rpki-client