Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc6a161-168e-3c26-960c-4018c69b66ee.roa
File:                     7dc6a161-168e-3c26-960c-4018c69b66ee.roa (raw, json)
Hash identifier:          vQrfAR3ETZt0vItXCmwaUM3UPBMuW/29Nxo290HBaOE=
Subject key identifier:   F9:7A:C6:BA:B6:E4:DB:36:2E:39:63:E6:2F:49:80:EC:02:E1:2E:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC517DC82FC2669B9C2D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc6a161-168e-3c26-960c-4018c69b66ee.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     397211
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:51:7d:c8:2f:c2:66:9b:9c:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=8b1e7dfc-1347-49f5-adc5-990c8ea774e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:dd:4b:4d:bd:aa:b1:1e:4e:6d:d7:ed:e2:
                    94:8b:f5:d9:54:b7:11:5d:fd:c2:4a:85:bf:01:47:
                    70:c4:1f:e9:87:5b:a8:20:dd:7b:7e:2d:03:6b:63:
                    68:bc:ec:4c:75:60:fd:bc:e7:b8:33:d3:26:b6:7b:
                    1d:b8:87:a3:7e:a9:c6:36:0b:69:c6:e8:4c:ff:83:
                    7a:ba:c5:e4:7b:71:9f:d8:f4:cc:2e:2f:84:72:05:
                    eb:c0:61:81:7b:90:de:ee:b2:e6:9c:ac:23:dd:10:
                    32:d8:f3:a0:c7:a8:3b:4f:a6:8d:a1:0a:e9:9f:f0:
                    5a:94:9e:55:96:46:7a:86:31:ca:1b:20:98:09:28:
                    59:0e:1f:3c:fb:45:aa:82:51:6a:19:f7:4e:84:21:
                    91:de:b5:a9:86:0d:b9:14:62:32:18:3c:4f:f1:a1:
                    f4:7b:b1:28:94:ba:ef:83:a9:6b:96:fc:86:ed:a5:
                    a9:9c:10:a3:d5:4f:5c:55:a8:c3:6d:8d:c4:3c:70:
                    ca:d9:5e:0e:ca:e4:97:ce:8d:0a:af:72:4e:5a:d2:
                    4d:34:02:2b:64:84:6a:e9:40:83:f8:2b:3b:83:81:
                    91:9e:bb:6e:e5:1c:69:16:a1:55:22:7d:69:22:9e:
                    e2:17:30:1f:c2:af:e9:e2:27:18:06:b9:af:a0:60:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:C6:BA:B6:E4:DB:36:2E:39:63:E6:2F:49:80:EC:02:E1:2E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc6a161-168e-3c26-960c-4018c69b66ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:01:02:76:4b:cf:89:58:27:38:56:b7:cc:be:4f:3a:1d:08:
         d4:ff:b1:ed:bd:d6:62:b7:09:6d:8c:67:53:6c:25:35:44:68:
         71:3d:42:fc:56:80:7a:75:0f:1b:0a:1c:77:ac:ff:ea:47:29:
         84:b4:91:3f:83:dc:63:2d:fb:c5:25:4a:6d:75:c9:62:bb:c2:
         58:19:71:a4:44:ae:e2:ff:dd:68:ad:46:15:e5:9a:76:af:f3:
         0c:5e:c1:f1:c1:ee:53:c9:ba:8f:ac:84:1c:a3:50:34:64:6e:
         69:13:64:5e:c3:fc:c7:57:b9:df:57:26:a9:b0:63:fe:69:79:
         a5:2d:34:9c:89:db:66:b5:74:00:6a:32:fe:4b:21:74:2c:66:
         59:71:76:c5:96:28:43:66:78:1f:f1:31:21:b8:11:12:36:2b:
         d9:8b:30:8c:01:5b:60:84:71:6b:76:b4:e0:1d:e3:be:7a:77:
         0b:08:e1:00:75:d2:3d:46:f1:d3:d4:53:92:ed:4c:55:0b:35:
         41:6d:fb:6d:60:bf:e5:f6:69:e1:9f:db:74:37:1c:91:85:82:
         a5:d7:9b:49:36:41:25:51:a2:02:cf:b5:85:a1:30:f2:ef:5c:
         8c:b0:4c:3f:3a:82:55:63:c4:e7:2d:a3:8c:36:e4:47:4d:df:
         c8:5a:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:43:50 2025 by rpki-client