Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b0ab05e-18e9-3598-8185-81ce4a373736.roa
File:                     7b0ab05e-18e9-3598-8185-81ce4a373736.roa (raw, json)
Hash identifier:          /9bgnqpUVCL/2+F9ZAVKhpuPJs6UNquLk2Ywm9VyiSE=
Subject key identifier:   4B:10:D3:5F:26:76:0F:97:70:8D:91:27:C5:C8:F9:3D:60:CA:91:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4D4194B8B0FE94A5F680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b0ab05e-18e9-3598-8185-81ce4a373736.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     20431
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4d:41:94:b8:b0:fe:94:a5:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=12cb096f-ee21-480e-962c-abe5ad672d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:eb:01:22:f7:f6:87:c2:ea:d4:64:9f:b9:
                    5c:e0:57:0a:8f:28:c9:aa:cc:b0:5c:a7:4f:58:aa:
                    46:a2:a9:38:bf:71:46:6f:75:a4:b2:d2:7a:c6:3f:
                    f3:31:83:83:17:d7:1c:74:71:37:c3:1b:4e:f7:75:
                    65:79:52:ce:dc:54:5a:4c:c3:27:dc:aa:6a:d6:de:
                    6e:c9:01:09:d5:01:48:85:b2:31:e3:47:47:55:bb:
                    c7:7c:7c:23:87:25:f2:5b:ab:d5:36:06:6e:c8:95:
                    b3:34:18:a0:26:62:12:c6:26:4c:f0:a7:42:7c:84:
                    79:76:f7:a4:e3:d1:81:01:86:88:59:ce:3b:a3:02:
                    07:fa:c2:a3:98:f8:0e:e4:78:31:0f:3f:d5:3d:97:
                    5e:b8:a3:d8:42:46:0a:33:55:3a:19:73:c6:aa:69:
                    1c:44:4e:d6:d7:a5:97:20:ca:92:29:0d:72:62:5a:
                    4e:0f:ca:75:f8:74:dd:66:e3:b0:6a:65:f3:d0:e0:
                    44:af:ab:45:ac:81:f6:3b:a0:28:98:d8:b0:d4:87:
                    56:7d:18:f6:4f:75:dd:a4:fc:32:61:44:2a:5e:4d:
                    c8:0d:75:b9:19:90:2d:e2:5e:75:af:12:26:9a:80:
                    e6:82:7f:e9:63:40:2a:db:20:67:ed:ff:f9:f7:f3:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:10:D3:5F:26:76:0F:97:70:8D:91:27:C5:C8:F9:3D:60:CA:91:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b0ab05e-18e9-3598-8185-81ce4a373736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:d4:7b:b3:02:76:82:8b:7a:5b:f9:c8:92:2e:03:0b:6a:
         a5:e8:17:bb:b8:9e:d6:47:f9:4a:c0:fa:f0:08:50:81:89:2f:
         a0:d0:e5:33:b7:da:f3:13:71:3c:f4:eb:3a:ce:d9:95:1b:12:
         36:0b:80:15:c0:3d:4b:51:84:d5:48:94:ad:06:1f:eb:da:af:
         e2:ca:79:9f:b5:b9:9a:97:df:f7:f9:3c:86:2d:7e:65:5c:cd:
         e5:6e:1c:a4:9f:18:bb:c8:71:cb:64:5c:d5:45:2e:f9:da:b7:
         d2:c2:f2:c6:04:99:f5:ed:2d:cd:19:83:15:b3:18:0d:bc:35:
         7b:2a:95:c7:ba:07:e3:54:d1:c2:d2:3b:71:d7:0a:54:d5:7a:
         20:b1:7e:f3:b1:ac:38:18:3f:e8:5d:8f:80:b7:3d:d5:36:4f:
         d6:67:bb:89:19:c5:72:b1:41:92:9e:d1:86:dd:cd:34:e2:7b:
         2c:fe:86:01:5c:c9:b8:9f:71:3d:fc:1f:1a:8e:69:2a:2f:e4:
         e9:3f:40:06:84:24:bf:34:44:ac:d1:58:f5:fe:34:60:04:b7:
         af:6b:35:14:2a:5b:44:8a:10:c7:ce:08:83:59:db:24:66:aa:
         28:08:d0:34:03:b3:45:67:22:2d:4d:94:59:2c:86:d3:33:d4:
         cd:c8:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:38 2025 by rpki-client