Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33b563e3-da66-309d-83ef-e07107936c4d.roa
File:                     33b563e3-da66-309d-83ef-e07107936c4d.roa (raw, json)
Hash identifier:          YuWKTaCrg74hrSYa+T5ebIGMWS9gd1jiMlm9d+HkApE=
Subject key identifier:   74:F3:00:9F:94:74:4B:51:9F:8C:35:62:69:06:CC:84:E7:A6:E5:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D23974C971586BB35600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33b563e3-da66-309d-83ef-e07107936c4d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397207
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d2:39:74:c9:71:58:6b:b3:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=11fc1e51-0f68-4640-b49f-cf691f722988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:c3:1d:de:c8:a4:00:42:d6:84:2e:13:c3:
                    7d:62:71:71:e8:bd:c7:24:76:fc:b5:3b:28:c6:4a:
                    ed:eb:9b:15:5f:36:0c:68:0b:da:99:af:46:19:01:
                    68:ef:38:6f:c4:85:bd:fd:70:8d:44:3a:0d:db:30:
                    20:37:2f:2a:88:2b:51:f3:fe:c2:ac:e7:94:60:f0:
                    2a:00:c3:9b:b9:57:81:0b:23:eb:06:bd:7d:d3:3a:
                    57:fa:6a:72:ba:c0:86:c5:80:39:e3:6c:d3:d3:6f:
                    c0:d0:95:7e:0f:7a:81:7d:40:c4:ad:2c:3a:0d:34:
                    06:d0:f8:57:7f:ec:b9:b8:06:f3:16:56:98:9e:ca:
                    7b:39:e9:66:3d:e6:ce:48:a1:d9:10:33:6b:11:37:
                    41:41:08:21:bb:b0:bf:67:8f:a1:77:aa:49:51:06:
                    c5:59:4c:dc:64:b4:5a:c0:0d:d6:ce:ec:54:40:61:
                    2d:32:8e:4d:09:eb:59:33:6f:06:72:d9:8d:72:59:
                    0f:5a:a3:f7:4b:c7:24:26:c6:fa:8f:d0:b7:18:b5:
                    bf:b4:6b:ff:d7:94:ee:22:6a:e5:cd:ff:f8:e5:71:
                    59:08:bb:87:af:52:99:18:53:4d:06:a5:7a:0e:40:
                    2a:37:9d:e5:e3:9a:e7:9a:30:9a:a1:18:17:35:76:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F3:00:9F:94:74:4B:51:9F:8C:35:62:69:06:CC:84:E7:A6:E5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33b563e3-da66-309d-83ef-e07107936c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:f4:55:4c:d0:95:ba:c2:60:00:5e:e0:47:48:2e:d2:f6:
         76:9f:69:f7:a8:4f:9a:76:f8:a5:05:c0:22:1b:d7:08:9a:df:
         db:b3:f2:7e:10:27:d3:1e:e1:b3:35:8a:53:eb:0f:b7:15:c3:
         65:bf:59:4d:1f:57:f0:9e:7e:0b:95:13:8d:09:5a:ba:00:60:
         75:af:ab:ef:a5:70:8b:67:34:34:d0:16:27:f5:84:90:9b:b5:
         9a:75:21:55:2b:3a:7d:b1:2f:53:5b:9d:a6:e2:50:aa:98:2d:
         92:13:2f:52:30:a1:aa:22:06:b1:c4:34:90:db:1f:f3:cd:28:
         68:f0:3c:b7:00:bf:e7:77:a5:c2:74:5a:ac:19:a9:29:f4:3f:
         37:00:e0:1e:f2:ad:48:f8:8e:53:9b:ff:6f:ca:a4:a4:b3:15:
         4f:73:ae:76:42:18:c6:63:bc:9e:fe:fb:17:54:29:2f:5b:7b:
         1c:90:d0:ef:bc:3e:9f:9b:95:e7:b8:71:95:5f:b5:e9:ad:96:
         14:65:1e:8d:e5:c6:fd:96:eb:05:07:2f:a4:b4:02:ad:ca:0b:
         2c:9b:83:c7:08:9a:ee:a8:22:70:b1:21:b2:44:96:f4:1c:a5:
         21:f5:03:08:f8:da:85:f9:94:de:b5:37:7a:6e:3a:09:97:8a:
         b6:fe:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:18 2025 by rpki-client