Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa
File:                     30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa (raw, json)
Hash identifier:          DRWVYXAW2l5v13UA71m/qn1QpSYkW3RZLrBd+IaeYUU=
Subject key identifier:   CF:06:09:D7:D3:E4:5D:3C:4A:82:3C:F1:72:5F:5F:7E:AE:93:01:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AD7D1445867866E1DE260DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396615
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:44:58:67:86:6e:1d:e2:60:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=4aaa3e99-dcdf-48c5-976b-63d3b3d777c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:82:85:d0:b3:26:0b:6c:ce:b7:ba:73:33:
                    12:d7:09:84:81:1b:f6:6e:e1:4e:6a:97:63:03:aa:
                    ea:f6:31:94:4a:13:fb:ff:6a:a1:23:65:05:5a:67:
                    ec:e9:7f:39:48:5b:74:75:fa:9d:c1:de:b3:1d:5f:
                    b2:a3:82:a2:2d:ea:ed:1a:41:ed:40:31:34:a7:53:
                    b7:b3:5d:7b:53:fc:ec:5c:cd:8a:7b:f1:2a:04:94:
                    e9:bf:ef:4f:e0:6f:e8:85:7f:be:a4:03:6d:e6:9e:
                    07:96:60:bc:47:ff:74:da:f8:4a:1f:28:c8:21:bb:
                    cb:8b:c6:1d:8b:d4:18:dc:12:04:53:25:7f:89:a8:
                    b7:ed:e9:2e:6e:6f:fc:5e:a5:dc:79:93:32:1e:1d:
                    8f:26:6a:60:7d:f4:de:5f:97:cb:40:69:c8:90:d4:
                    38:f1:04:9f:e3:72:4a:61:f2:0c:00:9b:b7:69:0a:
                    01:64:fb:67:f4:ad:b4:bb:a5:12:fa:f2:d9:66:10:
                    87:d9:00:d7:f5:ef:c0:14:d8:1b:05:e4:4c:7e:b0:
                    af:66:51:1c:fd:a9:c1:5e:46:c2:6e:63:80:6c:de:
                    0a:46:5b:c9:fb:4a:ba:c2:82:6f:33:76:89:56:85:
                    10:46:f9:f6:e7:b2:c7:3c:f9:68:c8:90:bc:19:74:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:09:D7:D3:E4:5D:3C:4A:82:3C:F1:72:5F:5F:7E:AE:93:01:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:30:26:6f:62:40:4e:37:76:7a:1a:df:52:7d:d7:e2:04:d1:
         63:ff:70:c4:3b:a3:15:60:15:3f:33:80:53:19:2a:7d:ed:7a:
         99:c0:41:06:36:36:d2:cd:df:54:b5:d1:45:b8:d5:07:85:b2:
         18:20:e4:b4:65:37:20:c5:86:f3:e0:8a:00:5d:1b:08:fb:11:
         c0:a5:d5:1c:2e:37:ec:13:12:d4:25:00:33:ef:94:15:7f:1f:
         d7:ec:bf:41:d1:13:50:9d:16:1a:f6:45:f9:d4:01:75:03:5c:
         70:76:f3:75:b5:9c:41:95:4c:fe:e5:c3:94:4d:31:05:81:82:
         4a:e0:21:6c:a9:4b:97:4f:04:7c:2b:08:c2:a9:3e:7a:d9:6e:
         07:49:94:2a:67:91:a6:9c:1f:94:fc:ad:85:a1:46:7b:a7:80:
         33:22:af:df:44:34:5e:20:99:bc:bb:9e:6b:82:51:57:8d:5d:
         86:e1:bd:ee:31:b9:2e:0a:01:6d:10:09:72:a3:ad:2f:d9:14:
         a4:86:93:28:53:a2:1f:ae:5b:0a:e8:80:ce:41:64:82:7d:2e:
         ff:19:32:91:4e:18:3c:9c:25:91:6b:0e:51:da:0c:a2:3a:b5:
         b5:76:33:91:cb:ca:a9:b2:fb:ff:9d:1a:81:83:60:3a:3c:c2:
         e5:dd:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:49 2025 by rpki-client