Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
File:                     46443bbe-dfe0-3b0c-9815-060f74077972.roa (raw, json)
Hash identifier:          bHmggWF00c0x1jjA8R8aZZ0WIP7khZJsE3x5R7joi/U=
Subject key identifier:   CF:D5:D5:28:18:A6:79:0C:A7:1B:3F:B5:30:A5:24:19:80:B5:7E:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC51ABE54B291AD5886900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     396549
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:51:ab:e5:4b:29:1a:d5:88:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=87e52005-1cd0-4ad2-b277-f11205a249e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:ae:c4:fd:23:a8:86:35:2e:af:15:4b:a9:
                    cc:d5:50:ec:28:b8:bf:6d:c4:9b:0a:05:7a:e2:7f:
                    a4:c0:4b:9b:5a:9b:46:80:83:78:c3:f5:76:83:f5:
                    e9:f8:f5:70:ab:2c:6c:dc:64:d4:78:71:a5:ab:6b:
                    d7:8a:44:5f:c8:64:e3:ba:fa:a9:d5:fe:97:32:3b:
                    d7:59:1d:df:17:98:e9:36:93:88:06:11:33:67:e3:
                    5f:d6:97:5d:f3:2e:4a:b0:cc:88:ef:7b:dd:21:42:
                    a2:1d:5b:6a:d8:4a:5c:2f:69:a6:f8:39:a4:fb:cb:
                    a3:cf:dd:6a:f9:6d:85:7a:19:00:73:a6:6f:d6:90:
                    76:9a:6f:e6:7d:9c:e1:cb:4b:48:34:1b:5f:dd:c5:
                    a2:9f:63:25:d5:8a:40:81:f2:2f:c4:c5:16:a0:c2:
                    2d:2a:d3:db:bd:56:ca:9c:34:77:e0:e2:8b:1c:c3:
                    6f:e5:66:14:dc:c4:00:4d:26:78:b8:13:44:af:3f:
                    e2:66:ef:4d:e5:05:c6:d9:73:f6:b0:96:95:1d:31:
                    ab:c8:03:da:e2:ca:fd:a7:18:89:5b:eb:f5:e1:9a:
                    3a:03:01:69:3c:96:40:e3:7b:67:d2:54:e6:ed:b9:
                    0e:c8:3f:ba:19:4b:3b:d3:a8:bd:94:fb:df:45:77:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:D5:28:18:A6:79:0C:A7:1B:3F:B5:30:A5:24:19:80:B5:7E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c9:16:64:8a:23:f3:85:7e:f9:be:1b:10:9f:de:9e:55:8e:
         76:bd:81:46:3a:e5:cf:e2:88:32:d9:f7:30:0e:61:96:93:7b:
         91:44:a3:7c:a8:d0:88:b5:dd:0a:d2:46:83:19:eb:b2:23:57:
         b9:79:28:86:61:fe:be:f8:c0:c5:49:fc:a4:3d:e6:9c:cd:5c:
         f1:21:4e:fd:d4:11:5f:79:93:fa:e9:85:75:f6:4f:c8:64:ee:
         6d:eb:e0:b6:f3:3c:fa:3d:7d:65:93:7c:ad:3c:b9:83:cf:b6:
         b9:83:7b:7a:63:65:6f:e2:4d:26:af:01:f6:dd:bc:35:e8:51:
         ac:87:6f:76:b9:c1:0b:b5:26:e3:0e:35:0a:ce:62:c2:7b:93:
         54:4c:70:b3:2b:68:da:0f:8a:5c:e8:61:d0:f4:80:0a:3c:68:
         72:f1:6b:f3:37:8f:13:b0:7e:8a:96:b1:87:cc:e5:1f:75:77:
         57:56:6d:f4:be:a6:82:66:03:f4:d9:6d:f4:4f:3b:b6:1c:09:
         f2:59:82:f7:cc:c6:88:71:a4:04:32:81:f1:a4:76:2c:07:10:
         3b:03:75:ee:ac:e3:6e:6f:36:47:55:47:8c:35:9b:9b:88:0e:
         00:e5:00:82:93:81:5f:f1:63:85:c9:ee:77:0c:11:ce:45:c4:
         99:f2:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:28 2025 by rpki-client