Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa
File:                     33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa (raw, json)
Hash identifier:          fmt6o37gEdW692nhF7oJXGMb5AKzvZIV/+FHi8Wo+Yg=
Subject key identifier:   0E:B5:3E:43:DF:0B:AA:54:5D:0B:63:73:39:65:26:30:E7:63:98:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E8BD9ED3B39141EBBF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397198
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e8:bd:9e:d3:b3:91:41:eb:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=36a33aa4-de91-4bf1-a5d3-eb763ffc4fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:75:ab:b1:30:de:fb:81:7c:f5:e4:ee:fe:
                    e8:30:5b:6c:2e:34:47:fc:ad:d3:2f:97:e4:79:af:
                    24:7e:eb:db:27:8d:1a:9c:98:da:c3:97:49:ee:1b:
                    c8:fb:a7:47:06:c1:cf:aa:8a:66:57:ce:30:2f:2a:
                    37:9f:90:09:6b:cf:c9:ed:c4:c2:6f:c5:8a:b0:4d:
                    5e:23:79:44:66:05:95:fd:24:8d:55:55:d5:c8:56:
                    c7:1c:88:fb:73:7b:5b:90:3b:f3:f1:89:87:38:eb:
                    c7:94:3a:16:22:dd:2a:3c:46:53:d2:33:72:f8:9d:
                    0e:9a:81:ab:98:00:9f:98:87:c9:39:33:7d:13:23:
                    ab:98:26:15:85:5c:ee:12:2c:5c:95:84:81:72:c6:
                    bb:37:76:63:8b:e9:b1:2c:22:3a:c3:bd:1a:09:4a:
                    7a:d2:c6:36:a0:54:60:45:fd:6a:b3:c9:14:32:69:
                    b5:7a:66:ce:c9:9b:a6:38:b3:f4:26:59:31:e2:a5:
                    30:49:1e:47:74:9c:18:3b:40:8b:2f:19:ec:ae:20:
                    9a:db:5f:5c:0a:a5:6f:53:34:5d:b6:69:d7:ae:81:
                    9a:8f:b1:62:87:c1:46:28:31:a2:25:7f:1a:bc:ac:
                    f5:55:0c:4c:f2:38:12:44:5a:49:81:00:44:77:1c:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:3E:43:DF:0B:AA:54:5D:0B:63:73:39:65:26:30:E7:63:98:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:fa:25:68:0a:eb:4a:8f:e3:f9:dd:59:f4:69:be:43:47:
         c1:cb:b6:31:92:55:85:83:4c:6d:af:7d:1c:5d:53:af:74:3f:
         f0:1b:42:77:32:88:0f:ba:ea:06:f9:c9:8f:ee:a5:1b:f2:52:
         6b:e1:a7:ef:2d:23:60:a2:f0:00:08:7a:3e:8c:8d:f6:8c:48:
         89:c7:9b:bc:30:9e:21:bd:72:29:f8:09:14:1e:75:97:a1:0d:
         f1:3d:1f:66:d0:e4:7f:58:8b:ee:47:94:11:97:fe:68:7e:3d:
         d9:a2:ea:1b:a6:b6:3e:0c:62:96:0d:f1:6d:da:01:6c:21:90:
         17:45:94:ca:79:49:ff:23:a6:44:7a:57:01:24:ba:87:e2:e3:
         b2:91:ae:4c:37:76:36:80:93:04:55:1a:c1:35:b9:11:2a:e2:
         bf:18:c6:c6:d8:73:24:98:4b:5d:3c:b3:20:fd:ad:51:ce:c0:
         4f:6c:0c:9a:42:53:2c:32:72:1d:50:c5:09:33:14:8e:c4:45:
         17:48:75:cc:70:86:7e:dc:53:9b:83:64:4c:f1:c8:07:a7:39:
         71:15:66:62:f7:3b:12:4e:f7:4b:8e:93:40:7a:e1:d2:b6:5c:
         07:59:93:d5:83:5a:32:39:40:8d:47:03:2e:25:01:1d:65:9e:
         fc:c1:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:32 2025 by rpki-client