Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e3fe9-259d-325a-8895-e7891e5e4a42.roa
File:                     4e9e3fe9-259d-325a-8895-e7891e5e4a42.roa (raw, json)
Hash identifier:          +N2BnpOMDjlXYAA9QyIBHc48pgeEljSxFW8laeTV7LE=
Subject key identifier:   99:E9:2F:23:65:94:D5:13:CF:51:49:1D:2A:B8:8A:9F:D2:D7:AB:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C71719F1E87026F24800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e3fe9-259d-325a-8895-e7891e5e4a42.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396545
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c7:17:19:f1:e8:70:26:f2:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=cde895df-9739-4f85-8fef-d1932d71af3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:e1:20:c3:e1:e8:b1:24:4a:cf:c5:83:d2:
                    77:51:47:09:3d:43:55:a9:3b:fc:77:65:7e:42:b8:
                    29:72:6b:dc:b0:ff:45:e5:df:8d:27:64:aa:45:30:
                    97:3a:15:0e:9f:a4:0c:a8:55:21:b7:8e:5d:cf:c2:
                    37:20:ab:47:7d:3a:6b:98:b5:ab:c7:ba:c5:8e:d1:
                    e2:27:18:e7:11:6f:37:e3:49:d0:8c:0f:49:10:d8:
                    8b:28:5e:04:d6:e9:17:a5:f4:1e:7d:01:c0:03:e0:
                    18:cc:4e:d2:e8:17:4a:05:38:88:d8:84:6c:d8:f8:
                    9f:36:8d:c6:09:fa:1d:f6:ff:de:fc:37:a4:59:ca:
                    66:1b:6a:c3:95:cf:2f:42:4b:ce:94:80:e8:36:1b:
                    c0:e9:5a:67:b0:9a:78:3d:85:50:5c:45:d3:b3:1c:
                    e4:d0:9c:cb:28:f5:fd:47:48:9b:2a:c0:a2:b1:df:
                    d7:7e:1a:c6:77:dd:68:90:92:e1:0c:05:cb:ce:56:
                    5d:88:d7:48:6a:28:bc:98:4a:66:e3:80:2d:2c:2d:
                    a9:19:f9:a9:2a:bd:53:e4:8d:5d:90:7f:b6:f2:f8:
                    21:ef:ab:04:8e:89:95:6f:51:f3:c5:86:22:2f:ba:
                    e1:f1:a5:84:bb:e5:6c:c7:b6:39:73:50:26:33:29:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E9:2F:23:65:94:D5:13:CF:51:49:1D:2A:B8:8A:9F:D2:D7:AB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e3fe9-259d-325a-8895-e7891e5e4a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:94:43:15:7e:5f:52:3f:27:28:a0:f0:bb:7c:bb:cb:db:
         57:ea:a8:ac:fe:9e:3c:10:f0:db:61:16:1c:88:32:06:2a:02:
         fc:1f:fc:2f:3d:e9:4d:a3:7c:db:2b:8a:a2:e5:33:b6:b5:a2:
         4c:8a:fe:69:47:74:f2:b0:8c:48:d4:eb:d9:e4:39:c3:bb:87:
         ee:04:73:a4:a8:73:42:b8:46:00:a4:31:72:74:28:b6:56:61:
         f6:66:b6:f7:9e:1d:02:72:60:fc:73:33:36:82:76:ff:5a:e7:
         6b:30:36:a5:d4:8e:a8:38:4c:96:58:c6:a9:b8:f7:72:6f:75:
         5d:f0:4a:b4:eb:b3:ef:52:7d:dd:75:db:63:70:54:1e:12:5c:
         9b:4c:d2:f0:b7:c4:26:84:3a:76:06:62:74:bf:c4:d0:c2:5b:
         04:a2:71:e8:53:a7:0a:8b:d8:62:33:9f:66:a4:62:e6:6a:9c:
         28:ad:c3:f0:71:60:33:26:27:20:1b:b3:86:06:51:f1:6a:a9:
         1d:43:f6:7c:b7:7d:2c:a5:da:b9:00:92:d2:63:ca:b5:e9:61:
         58:c3:6f:e9:d9:1e:0a:38:da:5c:58:28:d8:de:e7:05:07:36:
         15:5d:b8:cc:ef:a8:a9:55:94:6e:37:61:d3:9c:b5:99:58:a9:
         01:71:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:37 2025 by rpki-client