Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
File:                     53db66ac-6a18-3801-849d-20f1f36c2143.roa (raw, json)
Hash identifier:          WvCh5Eg+8ktR1O70b0QEKkR8nOi0PQD1KYZhwuS0jVg=
Subject key identifier:   AD:1B:9F:2B:4A:57:38:C3:A1:33:6D:99:15:3D:50:02:BA:12:07:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CD55BCF946992142CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20362
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cd:55:bc:f9:46:99:21:42:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fa6923f8-82e9-4d99-bc6e-5418e8e91889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:a8:fc:30:0b:76:b2:8b:90:d0:50:72:06:
                    52:5b:f9:68:c3:b6:dd:80:29:f4:6a:58:32:fa:73:
                    1d:e1:c9:8d:ae:b4:62:89:7f:9f:5c:ae:b0:b8:28:
                    8a:91:b8:5f:b9:53:dd:8c:42:af:8d:5d:28:68:9f:
                    a4:48:de:5e:96:24:d5:ad:ce:de:65:5c:c3:94:49:
                    c2:5a:b8:5f:ea:ce:80:a0:10:43:7c:2b:38:25:6d:
                    61:58:74:80:96:19:d7:93:84:18:37:de:7c:d9:2f:
                    9e:7c:91:bf:71:ab:35:2d:ca:59:8a:a2:05:18:4a:
                    9c:09:09:58:8f:c3:31:75:6c:e1:a0:3f:02:c8:0a:
                    75:43:46:ba:0b:5e:c1:ec:a8:4e:f3:eb:8c:7a:a1:
                    40:cd:f9:c6:39:a1:f5:8e:94:68:64:a4:49:76:7f:
                    fe:26:15:f0:99:34:3f:3b:a0:22:be:fb:0a:fb:33:
                    a1:cd:f5:e6:f2:c7:8a:4b:68:ec:6f:c0:c2:ee:a3:
                    93:f3:fe:42:8c:4b:9a:51:f5:08:ed:f3:6a:9d:e2:
                    f2:5e:f5:82:bd:c8:d8:a2:20:5f:fe:7e:73:6e:c4:
                    70:9b:d9:eb:9d:4f:ea:17:1b:71:54:71:16:d5:8e:
                    cf:1e:71:55:50:40:56:21:af:6e:4f:d1:41:ce:60:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:9F:2B:4A:57:38:C3:A1:33:6D:99:15:3D:50:02:BA:12:07:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:64:04:79:56:6b:da:1f:61:a0:5d:19:20:a6:0c:a7:d0:f5:
         00:94:f1:ff:1e:12:f2:c8:5b:45:0b:d2:eb:4e:cd:ca:c1:1f:
         d5:2b:69:28:87:3b:30:74:8f:19:7d:b0:2f:1e:1b:e5:e2:7f:
         11:09:0f:3f:53:c7:66:c5:b0:16:e7:62:96:76:3c:a8:a4:ad:
         4a:72:1e:c6:3f:9c:62:31:ee:91:73:ab:a8:dd:f1:d5:7a:1e:
         51:26:7e:73:aa:8f:93:24:c7:51:9b:28:da:23:96:03:2e:67:
         64:14:6d:37:25:c4:a0:0d:cd:25:bb:ae:ad:9d:a2:94:f9:f7:
         8b:3b:de:b4:6e:6e:44:df:d6:5b:95:e8:7b:ae:c7:34:27:9c:
         aa:e6:12:9e:15:00:8e:c7:b4:e4:ce:59:fc:23:96:85:b6:84:
         f9:25:c4:21:87:62:40:a1:18:5b:75:d5:58:29:d8:15:88:8c:
         b6:d7:4e:87:a2:37:26:b5:9b:f1:19:95:cc:27:74:f1:f2:39:
         18:21:9e:27:6b:bd:ec:f2:2a:54:4f:08:d8:03:70:3e:64:df:
         e3:06:99:11:ff:ed:d8:f7:60:3a:c4:30:f8:3f:33:8a:54:fc:
         47:82:b4:cf:4a:44:0e:4d:7e:8c:d4:b8:df:4a:02:49:2d:54:
         d1:f9:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:25 2025 by rpki-client