Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f02926b-5560-316e-9cb7-1c59776ea384.roa
File:                     8f02926b-5560-316e-9cb7-1c59776ea384.roa (raw, json)
Hash identifier:          jknxSL49sDqvlsPtm+9gnnjfkxEax37kr6YuhIknNFA=
Subject key identifier:   73:B7:76:F0:7F:92:11:7D:45:60:F5:06:4F:DC:63:D6:CB:41:34:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE4613BA1E7824395B708F680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f02926b-5560-316e-9cb7-1c59776ea384.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     396579
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:3b:a1:e7:82:43:95:b7:08:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=76cbfc76-330f-4465-8fdb-4b1eda49e0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:eb:b2:20:0e:c8:b0:2d:f7:5d:91:2a:cb:
                    4d:47:bc:8a:1a:02:5c:28:9c:3d:ea:83:56:fe:bf:
                    1d:5e:47:fc:36:d0:dc:b1:f0:12:ed:0b:72:b8:6b:
                    0b:89:38:f9:9e:08:b8:92:8c:ab:ed:d1:db:52:b5:
                    5b:5f:04:35:0d:64:b5:da:82:20:05:63:dd:b8:40:
                    19:6b:4f:0a:24:22:71:10:ef:cf:e3:d9:53:28:b7:
                    74:b0:bf:01:b6:75:43:db:72:cb:21:56:0a:b5:bd:
                    32:7e:ef:c9:b1:7e:55:58:1a:f6:c5:6c:8d:be:a6:
                    78:53:b4:f8:b3:6b:b6:de:16:92:8d:ea:47:16:34:
                    cf:4d:16:1f:ba:28:57:3d:73:4a:31:0e:d5:d1:52:
                    8e:a9:a3:48:d6:be:e4:ab:e6:fe:44:b1:43:c9:40:
                    44:c8:8b:98:26:3b:b6:2e:ef:8b:10:0a:f6:68:4b:
                    81:7b:a8:1e:fe:15:ee:c5:18:53:9e:de:57:40:d4:
                    8a:1d:92:54:4d:48:c5:6c:dd:6c:03:cc:03:27:3e:
                    57:79:0a:6e:a6:1e:1a:a5:a0:be:81:a1:55:04:97:
                    97:fb:5b:fe:55:5f:2a:68:c4:e5:77:e9:41:4d:e2:
                    e8:12:7e:3c:a8:56:4c:cf:32:ed:47:82:23:6a:50:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:76:F0:7F:92:11:7D:45:60:F5:06:4F:DC:63:D6:CB:41:34:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f02926b-5560-316e-9cb7-1c59776ea384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:11:b5:1f:6b:d5:1a:12:d0:5f:94:48:d5:29:da:7f:e4:5e:
         fa:0e:1b:83:69:29:6f:de:c0:a0:b5:9d:8e:a0:bf:79:e3:b6:
         52:0a:72:b1:00:74:2f:90:65:84:e2:a4:48:dd:a7:eb:73:85:
         24:4d:02:b2:68:54:4f:80:fc:6a:36:fd:9e:34:d9:37:13:13:
         8b:d7:db:09:96:3b:87:75:2f:46:3d:bc:27:e2:66:ad:3d:e3:
         52:09:39:d2:4e:0a:8b:42:f2:19:17:1a:f8:d9:36:ec:f6:70:
         f9:38:6a:c9:36:6d:2e:2a:08:7c:53:c0:3b:a4:0e:f6:e2:58:
         fd:ea:99:88:e4:a1:fe:8d:0c:e2:f0:e8:aa:c2:68:89:a6:3e:
         23:a9:59:1c:c6:52:f2:c1:2d:11:97:d5:74:76:6e:be:88:0d:
         a0:b9:f7:10:21:3a:93:1a:a0:19:16:fb:32:66:2d:e3:70:ed:
         c1:54:46:55:2e:7a:36:c8:f9:52:37:2e:3f:4f:55:3a:66:b6:
         58:40:a5:82:48:d2:9c:cd:fb:c0:e2:42:a1:8f:5e:99:4a:11:
         b0:9c:63:3e:3d:80:9a:d5:4a:08:03:b1:1b:51:11:ed:94:37:
         44:83:61:70:01:8a:1f:00:bb:d7:f5:08:64:7b:71:76:5c:6e:
         f1:17:70:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:19 2025 by rpki-client