Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa
File:                     78fe7d13-2ec5-375a-a98d-24283ac30752.roa (raw, json)
Hash identifier:          uxyyG6JHPRflPuC+EKfN2dCEVPR3lwpu5bQtxknTCSc=
Subject key identifier:   5D:12:D7:F8:ED:BB:61:8C:75:30:17:0F:E7:36:7B:73:59:2A:71:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4FE032ABF3723D0F1B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     396563
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4f:e0:32:ab:f3:72:3d:0f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=e2672c08-176e-4809-ba61-8676947f34f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:9d:35:7c:88:ba:c5:b3:77:b1:81:68:9c:
                    21:60:5c:71:ae:e7:02:50:ed:27:04:82:5e:fa:68:
                    d9:fa:a3:51:83:e4:a6:95:5c:f2:a7:3a:da:d4:8f:
                    76:66:e1:8d:41:64:0e:68:66:39:3f:06:91:a6:10:
                    0e:25:7a:66:06:4c:39:0d:85:9e:ef:66:b8:8f:af:
                    fe:dc:31:f1:62:00:2a:06:f5:02:89:81:e3:e0:23:
                    89:dd:ab:2a:35:21:3a:09:1f:68:0b:06:dd:98:6c:
                    12:3d:06:41:b5:c6:a1:e4:d6:8a:7b:34:7b:9d:af:
                    ad:b4:26:ee:44:fe:6e:e7:34:c6:96:59:50:42:fc:
                    9d:d9:d8:d9:a6:ea:2d:ac:ac:da:7b:dc:ad:a6:58:
                    44:59:3d:e0:71:61:c8:66:76:84:41:e9:ce:55:2b:
                    0c:15:df:e9:c8:42:f7:fb:f9:57:24:86:e4:44:6d:
                    9f:fb:65:f9:87:f5:54:59:08:7a:6b:44:9d:8f:59:
                    53:16:ce:19:09:a0:de:0d:f6:5d:75:27:da:c2:4d:
                    f5:5c:b1:4b:56:cf:fa:b8:d5:ad:c5:04:e5:10:31:
                    92:de:62:df:71:0b:d2:82:f8:53:d7:1a:5c:b8:5d:
                    63:75:fb:69:a3:af:ba:b6:7a:a9:8a:c0:cf:d2:69:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:D7:F8:ED:BB:61:8C:75:30:17:0F:E7:36:7B:73:59:2A:71:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:18:a4:8a:a9:e0:6f:a8:f7:b3:69:6f:fb:9b:f6:f5:f1:c6:
         f6:df:b4:4a:28:d8:9f:09:36:38:07:a7:6a:63:57:dd:67:b7:
         28:6b:4e:d1:78:59:c5:a7:86:02:36:5f:65:03:ba:ae:ab:94:
         13:fc:68:ed:d5:bf:bd:26:e2:4e:69:8c:c4:8e:5e:74:3e:ca:
         ab:4f:dc:64:39:2c:e3:b0:9a:64:10:4d:6f:6e:ed:08:38:88:
         33:3c:62:ef:c4:af:9d:af:86:a3:b6:3a:bb:2e:66:26:65:5a:
         53:57:3c:d8:48:07:44:9d:ca:44:8a:0e:d9:04:0e:b6:50:4b:
         bc:45:99:af:9d:25:c3:19:30:33:7c:7d:74:00:7e:5b:70:6d:
         b7:cf:92:7d:42:00:71:55:cc:8a:32:8c:22:13:8d:eb:5d:4f:
         72:99:35:3a:eb:97:b1:c4:19:aa:c0:b1:ae:63:7e:79:95:63:
         8b:a6:63:71:dd:ec:bc:70:19:31:8b:2d:52:27:32:65:f6:72:
         81:48:42:44:74:41:a2:5e:36:f9:76:b5:7b:2e:9b:b0:1b:6c:
         95:8d:08:e2:8f:fc:1e:47:53:3d:3c:1c:e2:ea:56:95:ed:5f:
         11:1e:d6:2a:26:df:3d:1f:ec:c2:81:58:e4:a3:b4:7a:53:11:
         a9:7f:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:38 2025 by rpki-client