Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8358bc64-c8bb-32f7-906d-524ebb4c42a1.roa
File:                     8358bc64-c8bb-32f7-906d-524ebb4c42a1.roa (raw, json)
Hash identifier:          jaeV/eom0BguGaYMHZi3Fw7jdcSrHAZaLbqfzxbfGZs=
Subject key identifier:   BB:F2:3E:F5:26:9B:4D:02:CF:BB:B3:F5:9D:5F:D8:02:C8:1E:08:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4DF1CB9AD342FAB01700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8358bc64-c8bb-32f7-906d-524ebb4c42a1.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     396588
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4d:f1:cb:9a:d3:42:fa:b0:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=1345fcae-27f3-42aa-a669-c7fe601e09ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:40:35:01:89:43:5e:b7:9d:98:8f:b6:41:
                    0b:d9:89:45:9a:e4:d7:f1:10:1e:99:a7:50:a3:d1:
                    18:f9:8e:4a:56:fa:ae:24:4c:0c:81:69:dd:40:75:
                    4c:09:03:84:5b:ce:da:f5:94:07:8c:42:50:7c:0e:
                    66:e0:b1:6f:57:0f:f4:68:c7:e5:a9:e4:51:f5:a8:
                    24:00:3a:2a:ff:52:9c:00:70:ec:48:59:93:e9:5f:
                    4f:62:24:f0:30:7f:37:f2:89:70:7b:70:73:b3:01:
                    01:73:de:12:3e:21:f2:6c:87:37:84:9e:4e:b7:75:
                    3e:a0:6d:cb:bd:b8:bc:50:39:42:df:00:c4:09:5b:
                    f2:63:74:52:bc:ee:b5:17:60:47:40:de:24:a7:d9:
                    7c:f9:4a:a4:c4:36:16:d0:e7:07:e3:71:17:6f:4a:
                    00:cb:cb:0a:5b:8f:65:9b:87:de:ec:7d:af:d0:fa:
                    bf:e8:ff:40:8a:9a:67:fa:40:07:6c:3c:8b:dc:1f:
                    e9:aa:44:a9:4d:d4:b4:e5:81:6f:bf:20:e6:89:6b:
                    af:b8:8d:c1:8d:6d:74:c1:c6:d2:ad:71:90:bf:c6:
                    ec:e8:96:6f:dd:ed:f1:2b:f4:37:e0:76:0b:78:89:
                    a7:1d:3d:62:19:e3:c2:b0:31:78:fb:19:d4:67:aa:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:3E:F5:26:9B:4D:02:CF:BB:B3:F5:9D:5F:D8:02:C8:1E:08:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8358bc64-c8bb-32f7-906d-524ebb4c42a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:44:30:4a:bc:9c:03:6c:ab:ca:8a:00:02:3f:5b:4f:32:66:
         76:df:39:1c:74:3d:1d:9a:e4:79:05:dd:a3:47:3e:92:d1:b4:
         c8:a3:b4:2d:fb:de:52:4c:50:10:7e:24:51:04:a3:d1:c0:0a:
         5f:25:bf:58:af:85:42:35:aa:20:2e:b1:d1:f2:91:4e:fa:3f:
         c4:b9:21:80:12:ff:ab:31:90:70:f6:ee:b8:8c:6e:42:1a:e6:
         d9:29:fe:24:3d:6a:6d:7c:79:b8:17:f2:23:62:cd:f7:73:0c:
         b8:f8:3e:13:a4:90:97:db:cf:2a:53:de:b7:21:49:76:aa:69:
         d5:1e:fe:72:a3:24:44:19:92:c5:29:be:0a:4a:6e:60:2b:00:
         7f:fa:64:bf:d6:b9:59:29:a3:88:ac:5e:23:0d:9d:2f:a9:7c:
         a6:eb:eb:df:de:d4:05:bb:e1:5b:97:a2:4a:5f:78:dc:70:bf:
         87:22:44:df:18:b6:f7:f4:3f:bf:1a:13:0d:2f:13:5b:51:4d:
         8b:d9:0d:3b:36:74:ab:f2:8d:4d:25:62:db:8c:f9:6d:37:c1:
         4e:c9:1d:e3:87:6f:6d:2f:d3:2c:b5:b8:56:ab:49:e3:61:58:
         b9:61:08:eb:28:a6:e6:d2:f8:47:cd:bd:81:97:c8:6f:56:da:
         b2:ad:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:08 2025 by rpki-client