Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565d6c23-fdeb-35a2-8faa-39e1071dcc7b.roa
File:                     565d6c23-fdeb-35a2-8faa-39e1071dcc7b.roa (raw, json)
Hash identifier:          cG0UFYAXJgemFWtcPHh3BvRM1fqBkg6plQJm6onlqWk=
Subject key identifier:   01:41:EF:EC:96:8B:3C:69:9A:DD:E2:41:5B:DF:78:C2:AB:A5:AF:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F92A24C4F787E7CCB580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565d6c23-fdeb-35a2-8faa-39e1071dcc7b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396586
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f9:2a:24:c4:f7:87:e7:cc:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=cb835f49-424d-420d-ae0a-4f48df4bba65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:96:9a:19:e8:49:4f:51:08:88:78:a1:cf:
                    98:ae:de:84:c5:80:04:ff:7b:5c:0e:55:aa:c5:e7:
                    7f:5f:20:24:b8:d9:1a:ac:87:fe:68:a3:df:ff:b6:
                    81:d3:1a:89:8a:60:33:84:72:31:a2:99:e9:ff:9f:
                    b6:a7:53:45:31:fc:55:17:d0:ba:8c:87:c4:13:88:
                    40:85:34:62:dc:e5:77:e6:8d:d0:a6:e1:12:86:7a:
                    05:a4:d8:20:58:36:94:27:06:62:3c:e0:98:56:66:
                    42:b1:7f:e4:05:75:eb:f8:d4:1e:d1:ec:ae:78:41:
                    06:e0:8e:c9:8b:14:42:22:0b:4b:c9:25:d9:04:cf:
                    99:d6:02:67:8d:b9:9c:e5:84:ac:9d:d6:2d:a2:bd:
                    f6:15:25:6b:b6:e1:7f:4b:cc:3a:27:b1:c6:db:a1:
                    35:74:a7:b5:b1:4d:95:d3:3b:3e:eb:8f:1b:6a:7e:
                    5b:3d:cd:a1:28:36:0d:40:b2:b7:bc:ec:77:da:46:
                    f0:2a:ae:6e:e8:b1:f8:50:a5:60:5d:26:b0:ed:5b:
                    82:17:b6:60:3a:da:47:93:01:08:f6:ab:41:12:4d:
                    6f:da:ea:62:f9:0e:8d:c4:db:1b:15:2f:fd:48:8e:
                    b7:e7:46:c5:b3:a8:9d:ae:1f:a7:0b:12:1c:40:8f:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:EF:EC:96:8B:3C:69:9A:DD:E2:41:5B:DF:78:C2:AB:A5:AF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/565d6c23-fdeb-35a2-8faa-39e1071dcc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:8d:d3:20:1f:9e:85:63:b2:62:98:1a:57:78:16:1b:ab:
         eb:ec:d2:9c:05:0b:88:97:8c:80:67:42:bb:16:48:9e:76:66:
         28:e1:8d:5c:a9:02:2c:0c:de:6f:03:89:9f:a9:84:0d:b5:6e:
         d3:62:da:6e:f3:00:f1:1b:18:cc:58:ef:1e:4b:b2:d9:48:66:
         1a:86:71:c3:b8:f4:1e:cb:79:b5:5a:13:f9:88:83:b0:d1:63:
         74:40:47:94:a7:f0:d2:56:7c:8a:94:8f:73:dc:f6:4f:9b:96:
         9e:90:33:49:9f:3a:17:96:c0:14:7b:9f:80:54:22:6f:e3:d6:
         e4:ea:eb:b7:86:97:ed:87:fd:b9:1a:a1:e7:60:97:74:97:f1:
         ff:29:ec:9a:49:c6:4b:bb:41:0f:b8:0c:bd:7e:7a:56:e2:39:
         8b:ef:c9:df:2e:0b:08:3c:53:6f:bb:2d:c1:81:87:00:d4:13:
         51:59:3a:e1:d9:e9:cf:eb:28:86:21:9a:69:a7:c3:e5:19:2f:
         2c:67:b9:ca:da:a7:df:59:f6:31:b5:bd:d9:59:de:33:f0:5e:
         99:4a:31:01:40:57:16:ba:51:c3:a4:a2:90:2d:1b:3b:23:dd:
         22:6b:9c:c2:30:ff:0f:dc:df:58:56:5a:d6:7c:e9:a6:05:e4:
         2a:16:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:56 2025 by rpki-client