Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/756431ac-fa9e-3102-8be2-07217326745b.roa
File:                     756431ac-fa9e-3102-8be2-07217326745b.roa (raw, json)
Hash identifier:          Bep26nm6xU7CEyZT+3yuBrB2vJ2DyL5yc0XKZsReqk0=
Subject key identifier:   CB:E6:0B:A5:3B:D0:B4:56:0E:8E:46:6A:E9:20:F1:7C:0B:91:48:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E500CC0FE947A2E27440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/756431ac-fa9e-3102-8be2-07217326745b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396546
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e5:00:cc:0f:e9:47:a2:e2:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2a25eb22-6d38-4a30-be50-e8ac2f4556b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:d7:69:93:dc:87:34:e6:d6:2c:c6:0a:33:
                    ea:ad:82:34:0b:e5:b6:df:c5:00:b1:4f:86:65:cc:
                    1f:5c:50:77:2d:b3:fc:53:bc:92:3e:c8:42:9f:e0:
                    e9:93:87:37:d0:ff:f2:4b:2a:15:3a:2d:3a:2a:59:
                    cd:81:72:84:ca:a5:78:d4:59:dd:c5:cd:0c:c7:5e:
                    74:91:14:13:b5:28:ff:06:1e:bd:93:ee:5a:68:73:
                    be:e4:52:fd:79:5e:7d:b3:90:2d:d9:90:02:78:5b:
                    59:09:e7:c3:96:87:b1:85:88:fe:ab:74:53:f7:41:
                    36:63:85:0b:78:a7:ed:54:fa:55:84:af:2e:3a:e4:
                    8c:8e:24:be:d8:38:eb:4f:79:68:90:59:d7:ff:86:
                    97:5c:a7:25:01:55:ea:8f:15:64:49:1f:5f:e6:e1:
                    59:ec:8d:39:54:0e:9e:3f:d5:6c:ce:2a:2f:df:ef:
                    8c:e5:2b:92:18:f4:c0:b3:37:8c:27:4e:20:c4:55:
                    39:85:22:43:80:64:9a:f2:52:92:04:77:a0:8b:dd:
                    6a:ed:e0:c8:14:6a:03:95:2e:de:ed:33:c5:3a:84:
                    ce:91:81:16:2c:8c:62:ce:75:35:35:2a:df:c1:2d:
                    e7:33:08:fa:f4:f8:45:3a:2d:2f:2c:2b:75:a3:e3:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:0B:A5:3B:D0:B4:56:0E:8E:46:6A:E9:20:F1:7C:0B:91:48:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/756431ac-fa9e-3102-8be2-07217326745b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9b:9e:94:c6:47:70:6b:d3:98:4d:36:9a:0c:78:7e:c6:f7:
         0d:c8:87:8e:d1:83:17:88:47:72:1a:c9:67:29:40:5a:72:95:
         64:ae:f6:a9:ca:3c:3f:06:aa:0e:81:1c:0d:1c:4a:3a:32:1a:
         10:d8:02:94:d4:cd:51:67:a0:dc:a7:8a:5c:0c:c4:18:c5:71:
         82:e4:a6:6c:cb:97:6f:49:89:8a:af:89:0d:77:37:d4:70:89:
         b1:fc:b9:f7:a3:ba:79:43:13:54:14:f5:1f:85:bf:2a:74:a2:
         82:46:4c:32:d7:06:75:dc:f9:42:6e:db:7f:e6:a0:61:85:9e:
         aa:4a:1d:25:7b:0b:fe:30:67:70:2b:85:a3:e5:9a:d9:3a:2b:
         41:c9:21:36:47:09:77:16:eb:5c:ad:ad:5f:7e:cd:d2:05:74:
         3a:71:32:e3:86:50:88:56:43:66:aa:14:80:18:7f:13:ea:7a:
         ba:63:8e:c6:89:d2:38:5e:a1:83:26:bb:3a:bf:dc:29:0d:ea:
         d5:a7:be:da:28:61:cd:9a:7b:e6:17:a2:14:58:8a:31:57:e8:
         0a:74:fe:a1:07:64:40:76:91:b6:d1:8b:5f:d9:0f:28:7b:17:
         1b:2e:22:d3:f8:f6:7b:eb:55:2c:2f:f1:d1:4a:4d:ca:06:cf:
         c8:1f:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:16 2025 by rpki-client