Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
File:                     6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa (raw, json)
Hash identifier:          1nK5MobVkK0oTh/2ZnNtbOYjqjgZQUKsalB7ZIAvojM=
Subject key identifier:   5D:AC:BB:5B:B3:54:FC:9E:0F:CE:A1:3A:85:B9:65:A1:02:4E:13:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EA9062410FB2CD517D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396596
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ea:90:62:41:0f:b2:cd:51:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fa5b23a4-e37c-4c3a-9fec-42711a8c23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:49:3c:5f:57:f4:9e:0a:5f:6c:ae:6a:46:
                    5c:c1:63:36:09:b2:3d:c3:37:b7:79:af:d7:7f:87:
                    00:37:46:dc:c7:48:d1:7c:ef:db:cc:c9:44:8c:d9:
                    5c:06:41:88:f0:4f:e3:9c:66:5f:6b:91:c9:57:fd:
                    a4:8b:78:73:a4:d9:93:42:07:41:54:b4:19:26:2a:
                    66:25:74:94:5e:71:8e:67:33:03:b8:62:05:7f:89:
                    4a:c4:80:66:6f:e1:17:fd:55:a5:a8:5e:f6:ca:d6:
                    81:26:7a:1a:73:d9:d2:fe:81:21:34:dd:4e:c9:44:
                    bb:11:a5:21:6c:89:bc:9e:74:db:de:1e:c2:68:4a:
                    e5:04:08:f4:2a:70:0e:13:b3:9c:2a:d6:19:28:af:
                    0c:33:73:31:86:3b:53:be:87:87:9e:8f:36:73:dc:
                    c9:0b:d2:d2:1a:ce:4d:ce:3c:cf:a1:1e:19:b4:f4:
                    b3:8a:29:37:ff:a7:3f:b4:04:84:21:5f:d0:31:d0:
                    d8:4f:a2:f5:06:19:04:14:30:81:4d:cf:87:b9:ae:
                    2e:12:27:76:ec:d2:2f:59:3f:ed:8b:cb:a9:10:83:
                    58:63:c2:7c:8f:69:20:2a:bd:f6:9f:4b:7c:1b:7f:
                    19:5f:33:fc:f9:64:2b:5d:20:e5:82:0d:57:e6:72:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AC:BB:5B:B3:54:FC:9E:0F:CE:A1:3A:85:B9:65:A1:02:4E:13:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:c4:c1:75:fb:41:b4:26:ad:ac:ce:07:50:65:5c:a0:b2:
         b1:e6:fa:13:2a:1d:90:66:18:28:9e:12:e3:f5:9d:46:63:4e:
         26:d4:40:a6:43:54:83:f3:d0:c2:a3:8e:91:a7:a5:5b:55:2c:
         2e:b3:a2:5b:1a:30:24:32:88:b0:66:8f:95:cc:2b:0b:12:64:
         5f:34:3e:96:58:e5:9d:65:d2:36:2f:96:61:8e:55:ff:cf:48:
         e8:85:f0:70:08:4e:4e:d8:a6:0e:de:ee:99:df:12:5b:ed:95:
         38:71:b1:d0:99:5d:74:f1:33:38:0c:7a:8d:4a:f7:17:fd:0e:
         dc:90:1d:a6:71:20:ed:af:8a:e5:51:7f:78:30:08:1e:62:11:
         91:f7:34:d8:0d:48:a8:fa:a0:2c:bd:c2:d5:52:1b:9b:13:f6:
         3a:fa:7e:d5:16:12:a5:a2:dd:a2:a9:fe:eb:19:e9:e5:ce:27:
         76:d1:53:8b:e3:8f:ce:af:5d:a4:98:66:ae:e3:a2:3d:d1:36:
         51:55:70:2d:ac:01:b4:24:23:84:c9:b2:95:de:8a:37:94:dc:
         14:55:aa:b9:1e:4f:f5:a7:4e:ec:da:d3:70:22:a0:d5:83:9b:
         ac:5a:0a:26:3e:57:32:5f:99:ab:c1:07:6e:0f:35:10:c9:61:
         90:27:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:45 2025 by rpki-client