Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
File:                     5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa (raw, json)
Hash identifier:          SqXphC702l76AA7BLt67T1m1H580yY8rHBPAWFkojWU=
Subject key identifier:   BA:43:3F:23:7D:59:C4:F9:5C:0F:1C:48:6D:00:84:0C:8C:D7:BF:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE461360FA16A68DB06E2A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     397197
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:36:0f:a1:6a:68:db:06:e2:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=9f963801-a676-4b79-ba13-51cbe1c0e474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:ef:ec:40:03:55:8f:cc:de:62:c1:7e:4f:
                    e2:d1:24:1d:f4:16:c7:9b:81:ad:75:c5:fb:6d:7f:
                    61:0e:42:ff:14:c6:b6:c7:a1:3d:58:5d:29:72:cc:
                    90:b4:da:1a:d1:2e:da:94:68:7e:74:41:c7:96:3b:
                    57:e5:fb:1f:2d:88:a9:d2:2f:34:1e:dc:e7:a0:07:
                    b7:7c:db:7e:c3:84:21:15:45:28:ab:36:92:8e:0d:
                    8c:db:79:06:41:a0:84:23:d3:4d:e5:1e:f0:76:69:
                    bb:67:e5:49:e8:75:94:45:15:af:04:a8:21:1a:4c:
                    1d:01:d1:ac:3c:22:63:ca:b3:6e:b9:52:83:a6:bf:
                    7a:55:fe:65:73:7c:7d:c5:9a:37:20:2e:a0:f7:7e:
                    51:e2:74:64:a2:6c:cd:66:da:f3:9e:f6:64:67:5c:
                    1d:9c:e3:4b:81:b6:69:da:1b:c9:d8:fc:49:67:e1:
                    ae:32:a4:ec:39:db:d9:35:4a:02:2b:e6:87:83:29:
                    ca:70:41:b6:d7:80:f0:db:b0:63:ee:ba:e9:de:eb:
                    fe:e0:0e:77:1d:a7:86:d4:ce:6c:32:d4:36:cc:5d:
                    8b:71:61:17:36:80:66:c0:71:06:97:48:99:1d:b8:
                    98:e2:4e:90:d9:e3:65:69:0c:3f:39:b9:77:ac:81:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:43:3F:23:7D:59:C4:F9:5C:0F:1C:48:6D:00:84:0C:8C:D7:BF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:61:28:6c:46:29:49:fc:81:59:aa:d4:bd:6f:68:fb:05:
         cf:4a:0d:60:b2:81:79:be:78:61:8c:8e:34:5b:6f:75:61:38:
         98:24:74:72:bd:7c:c0:7a:e0:11:0f:29:e6:b0:c8:b4:e8:f3:
         9f:20:6e:fb:61:65:2c:07:de:cf:ba:57:ee:ff:f0:ab:4c:77:
         ba:e3:ba:7b:47:e7:9c:f8:c9:ca:7f:0d:12:d3:c2:60:ca:65:
         54:d4:af:a7:d1:4f:34:48:47:fc:6c:15:ed:00:76:e9:01:a3:
         71:6d:5c:24:ba:02:62:db:26:14:e6:be:24:fc:94:8a:e8:34:
         88:75:78:d7:94:7c:ff:48:7f:04:c2:90:56:e3:65:fd:fa:5d:
         b9:7f:91:e1:77:f9:58:85:53:0b:57:d2:9b:42:c5:84:ea:5f:
         73:86:b9:79:45:4a:87:89:6d:dd:40:98:d2:73:2c:91:6b:88:
         94:41:35:48:36:98:d1:cd:ac:e5:89:c7:c0:c4:a2:7f:d0:b6:
         4a:81:8a:ca:5b:68:db:2c:8f:fc:55:0c:5d:7d:b9:fd:2a:e1:
         f2:94:3d:9b:46:09:61:66:c7:83:92:61:44:14:33:11:5e:63:
         ad:91:29:cf:99:9f:72:2e:7a:dc:50:3a:9e:4e:24:d4:aa:f2:
         df:5c:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:14 2025 by rpki-client