Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa
File:                     7062973e-b1c4-3576-9391-7574cde8ceb1.roa (raw, json)
Hash identifier:          2q7/tgh70bJBRxDrbEJV9EtkIIGhSrBhSHNlxDbVaEs=
Subject key identifier:   E0:84:F6:FC:31:ED:D9:B5:B7:4D:5F:8F:26:BE:83:8A:52:7F:2D:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F1D8A0CE27A7F223C790
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     40647
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f1:d8:a0:ce:27:a7:f2:23:c7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4c42117e-3f23-4509-9e07-764b6daf9b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:43:2a:ae:10:b0:e4:a2:f9:da:c7:aa:24:
                    f3:c1:7b:95:67:74:f5:76:87:6e:88:6a:58:51:f3:
                    c0:ea:f8:9d:5d:0a:ea:be:21:80:ab:2d:23:ba:72:
                    ff:83:16:41:c9:3b:7f:16:87:d7:d4:4b:72:99:33:
                    aa:25:e6:34:88:9c:15:6b:ab:dd:03:a6:c6:63:1d:
                    d7:b9:36:ca:1b:3a:1f:0c:ca:8e:66:f7:51:c4:85:
                    ce:e4:2d:84:c5:2b:cf:88:38:fa:f8:83:81:bc:cc:
                    18:4b:3c:6c:7f:7d:1b:a9:00:e3:a8:d6:10:fa:79:
                    05:80:06:99:91:49:eb:76:7f:8a:d6:2c:15:59:58:
                    28:99:15:6a:c4:89:57:17:f2:09:73:38:17:37:24:
                    f6:b9:af:f5:4e:40:eb:45:35:72:a5:dc:79:28:f1:
                    49:ff:f0:a1:73:93:12:90:cc:98:f7:e3:18:d7:65:
                    c3:68:4a:8b:f5:3e:43:80:ee:44:d8:59:9c:f7:9e:
                    59:c5:6e:35:29:12:a8:84:d9:fa:a8:c5:28:c1:58:
                    ba:5a:e2:2f:81:d6:b5:0b:0f:61:a1:7f:c9:ef:a0:
                    be:9a:e8:4a:47:14:a3:9e:5b:50:fe:87:8d:35:e4:
                    99:b2:aa:0c:9a:98:18:9c:6d:87:c8:5b:c6:c1:5d:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:84:F6:FC:31:ED:D9:B5:B7:4D:5F:8F:26:BE:83:8A:52:7F:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:66:92:3f:93:14:d8:4c:93:6a:7d:53:e7:8b:21:82:af:
         17:0a:01:c5:e1:4c:6c:a6:60:1e:ac:4f:77:9e:fb:24:79:40:
         7d:f5:0a:90:c1:48:c9:66:c1:4f:4a:ab:b6:3d:84:dc:c5:64:
         3c:99:d7:bd:8b:64:08:3d:c7:b4:5a:62:34:fb:86:31:b9:82:
         d5:5c:25:d5:ec:1b:43:c4:27:0b:45:aa:b9:51:5e:e3:f6:54:
         f1:e0:78:7f:f6:71:3b:d2:40:e8:95:a3:6f:36:01:ae:e3:a9:
         90:eb:63:3f:72:56:54:73:00:75:6b:9c:d6:cd:85:b2:b3:72:
         25:6b:dd:0f:5b:4e:5c:10:b2:6b:14:42:1f:af:bb:91:a3:b6:
         35:c4:41:0e:97:61:c3:0e:47:7c:42:b9:4b:91:6c:32:08:7a:
         1a:ba:56:a5:32:84:9d:a3:b9:13:40:6b:cf:cd:24:7c:cd:55:
         38:d3:f8:40:a7:09:c9:86:07:e7:45:fd:0a:50:6f:aa:00:7e:
         2a:79:ed:69:2e:6e:90:45:a7:e0:d1:51:e4:73:bc:dc:1b:03:
         27:8e:ff:85:6b:53:83:d5:0e:36:16:68:67:54:55:55:29:ec:
         15:b3:0b:3f:21:30:23:6f:01:6a:05:a1:3d:70:b9:77:b0:6b:
         a2:20:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:49 2025 by rpki-client