Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa
File:                     3b192f03-b673-3e92-b698-91be9bfd5702.roa (raw, json)
Hash identifier:          P/Kg43oifncI04PyHFsuxHOQrrUJ58fvP24s7BJ6cUw=
Subject key identifier:   30:2F:2A:4D:9E:79:61:67:4F:44:CE:A6:C9:06:A9:07:97:73:EB:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FEE2E995997A996AB380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396555
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fe:e2:e9:95:99:7a:99:6a:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1a487bec-91c0-46a9-a80f-7b7f882a259a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:b9:94:e6:b8:53:ed:75:0d:c6:d0:74:e4:
                    a4:cf:bf:2d:63:55:98:73:e6:6c:ea:62:42:f9:28:
                    b2:43:54:b7:c9:3c:d1:7f:1b:28:48:46:db:35:cc:
                    66:8f:d7:27:ac:5a:d7:86:e5:95:e6:aa:dd:20:38:
                    6d:7c:08:58:57:e2:91:6f:0e:cc:45:c7:95:af:f3:
                    58:bd:0e:4e:1e:9b:3e:24:b4:d3:e4:d4:23:86:a8:
                    8c:d5:26:b1:64:d5:0d:85:27:62:30:17:9b:7a:e2:
                    32:52:6c:ab:36:2a:9b:4b:f7:39:66:ac:b7:5a:97:
                    81:f1:0b:9c:54:df:8e:1f:10:12:88:71:bb:8b:5b:
                    6f:ab:8f:16:3a:b2:01:30:1c:6a:81:a0:1b:d8:de:
                    fe:9d:9b:e0:2a:7a:4c:5b:02:29:57:37:08:10:2f:
                    88:6c:5e:08:01:96:f3:d1:26:59:6c:05:33:06:80:
                    67:0d:39:ac:bb:5c:cb:46:b8:3b:90:a4:2e:80:e3:
                    ea:94:4b:3e:f1:79:54:e4:94:7f:06:d9:3a:6f:41:
                    09:90:57:bf:31:46:9b:ee:f0:64:fe:89:c0:20:91:
                    8a:00:c1:5e:e4:e0:0d:48:59:bd:53:44:f8:fc:dc:
                    33:da:a5:4d:76:09:5d:c1:fb:31:bb:49:7f:38:14:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:2A:4D:9E:79:61:67:4F:44:CE:A6:C9:06:A9:07:97:73:EB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:9f:60:cc:27:e5:44:5e:19:da:5c:44:e0:32:0c:ea:83:
         bf:9f:d0:50:7c:6c:50:55:2a:a1:3e:a7:59:27:23:25:fd:61:
         b5:67:d0:d7:b8:81:3a:c1:16:0e:a1:1f:29:8c:2a:e4:e7:52:
         20:7b:e7:1f:a5:51:c5:ca:d5:ea:5f:21:d5:9f:27:fd:ff:59:
         65:99:f1:4b:eb:28:9d:ba:93:07:55:2a:0e:f0:09:7c:38:47:
         b0:f4:55:32:7b:5c:7a:d9:91:47:8d:b3:70:13:7d:43:69:4d:
         50:15:32:34:6a:89:2e:85:b9:0f:37:5d:9a:1a:1b:c9:5a:51:
         02:7a:8d:d8:a6:2f:c4:d6:1b:ae:fa:d6:f8:ae:83:a3:e2:78:
         9a:28:07:b5:a3:b1:24:38:dc:af:e9:06:9a:5f:b6:c8:e4:e3:
         be:fc:6c:19:68:31:5d:d7:f5:6b:f9:b2:d9:de:00:0f:f1:4c:
         2c:64:ba:d2:39:16:86:82:8e:dd:5f:31:fb:8f:04:5e:c2:b8:
         d8:1b:49:08:f6:7c:1c:2d:5f:c7:46:44:d0:ce:7d:6f:9b:9e:
         2b:f5:7f:d7:54:0c:00:3e:41:d4:ac:e4:37:22:2a:3b:59:58:
         3c:1e:b4:11:26:0d:9d:a2:43:f2:be:8b:b7:b8:4f:db:97:e8:
         ba:70:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:09 2025 by rpki-client