Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe203c5-736b-3106-898e-1b738fad7218.roa
File:                     7fe203c5-736b-3106-898e-1b738fad7218.roa (raw, json)
Hash identifier:          7VTz7GJ1S6l+X50LSrPdpSjJAhvdW9gDRDCljeOUEt0=
Subject key identifier:   D2:9B:5E:28:D8:51:B1:47:F1:DA:82:15:5A:06:19:CA:C6:7D:F3:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EE8A6932895A4AE9BB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe203c5-736b-3106-898e-1b738fad7218.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396614
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ee:8a:69:32:89:5a:4a:e9:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=aa2822c8-e142-4d9b-84e8-d204c70f5b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:14:aa:8e:b1:31:92:da:02:8b:0a:0a:ff:
                    7c:c4:28:1f:be:cc:05:43:d0:59:19:d1:f2:3a:ef:
                    45:75:bd:75:3a:e3:60:bb:cb:de:47:17:f0:c3:86:
                    b2:4c:9c:d9:36:c9:01:b7:76:1b:ee:d5:bb:1c:3c:
                    11:5e:fd:1b:d7:95:d6:ff:a3:cd:56:45:70:71:d0:
                    a9:b2:f7:00:b0:c5:7c:9f:50:45:ee:d3:f3:72:0c:
                    f6:c7:c4:50:02:9a:90:28:95:a5:df:3a:11:ee:af:
                    d5:13:87:c1:0d:af:93:f4:2f:79:80:fa:61:ce:eb:
                    12:f3:58:16:e2:f0:b5:6b:ea:e0:85:03:86:c5:61:
                    76:1d:90:56:ac:7a:44:42:a5:73:26:d1:25:c8:1e:
                    66:14:55:fe:68:a7:b6:8c:a7:b8:22:2f:51:9a:54:
                    48:c0:95:02:c6:14:f0:df:21:16:09:21:22:8a:1d:
                    f5:97:ee:c2:6b:f1:c5:3c:62:af:a8:3e:b7:5f:c7:
                    3c:c8:74:2c:cb:ca:9c:91:5c:f5:7c:94:81:8e:47:
                    ca:de:9d:79:12:a2:59:38:d3:0d:50:e5:00:a3:07:
                    37:e0:52:b5:f2:be:bd:50:cb:80:a6:38:24:ca:b1:
                    92:d5:ba:5e:df:bf:ee:81:c7:11:7b:10:a7:62:49:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9B:5E:28:D8:51:B1:47:F1:DA:82:15:5A:06:19:CA:C6:7D:F3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe203c5-736b-3106-898e-1b738fad7218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ec:67:8a:72:8d:94:4f:5d:06:1a:ee:04:c2:9d:71:0f:80:
         a4:ab:ed:2b:19:ff:49:e7:a5:30:00:64:ff:64:ba:b8:a9:1e:
         74:f2:92:71:f8:2d:a3:56:04:4b:6f:37:94:a5:c3:c1:7d:b2:
         74:d4:9a:6f:b0:62:14:b5:9b:5f:37:15:25:3b:a3:52:a5:b5:
         22:84:01:a7:4d:2a:b9:72:52:fe:0f:3a:d2:0e:a8:44:38:01:
         51:7d:b3:de:e8:4c:14:dc:d0:15:15:8a:93:80:57:4b:9d:1f:
         62:e1:5d:90:9f:0f:33:1d:1e:70:f1:fb:ae:63:3b:c3:37:ce:
         06:2c:8f:f3:24:a3:b9:0d:a3:08:c4:57:80:b7:da:22:b5:0c:
         56:54:41:96:30:24:4a:6f:67:57:87:79:ff:12:48:e3:16:a7:
         68:46:a1:f4:ea:a7:8b:b9:b8:43:a0:aa:bd:6c:23:3c:10:ef:
         ee:d0:1d:9d:b7:24:0b:91:4b:21:2b:82:c6:38:57:e0:c9:98:
         9a:54:3d:e1:77:03:1b:55:45:30:b7:f7:9c:07:b8:e9:9e:b9:
         e6:aa:6f:12:c1:c9:75:0b:b0:bb:f1:6e:5a:97:0b:68:c1:08:
         ea:e9:3c:3f:ae:f2:ab:9e:33:a8:52:5d:5b:b9:47:52:d1:19:
         89:48:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:50 2025 by rpki-client