Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4fdd2b5-ac65-35bb-901c-172f695d6fee.roa
File:                     a4fdd2b5-ac65-35bb-901c-172f695d6fee.roa (raw, json)
Hash identifier:          /EMnjFeS66ITCtp0d8RktnPE7a/FM/pkt3H1/GeBujU=
Subject key identifier:   C0:3D:03:31:90:5D:3B:ED:82:5E:BE:C3:2C:CB:77:D2:33:8B:0E:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D09E018C0EC1D2A91400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4fdd2b5-ac65-35bb-901c-172f695d6fee.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36618
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d0:9e:01:8c:0e:c1:d2:a9:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=971763b8-7363-46b2-8b2b-a1716d418679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:4f:29:19:19:e6:97:dc:89:f6:fa:5d:65:
                    a4:a1:78:5b:11:b1:29:9f:3a:f0:02:c6:a1:01:d2:
                    b6:d2:9c:78:fb:de:4a:b9:e7:94:c1:e0:6b:90:88:
                    75:df:a6:f1:52:e1:cd:84:49:46:13:9f:1b:00:64:
                    41:89:a3:d3:7b:0f:02:ff:9b:f6:24:41:89:44:12:
                    bc:f9:6f:3c:d9:18:1c:6d:13:91:74:59:b6:22:4a:
                    60:da:65:68:4f:e5:60:e8:76:bb:83:4f:a3:89:d3:
                    46:33:37:60:e2:da:99:41:9f:da:42:ab:83:af:4b:
                    8e:44:3a:60:dc:3e:ec:ae:55:40:c6:4c:56:34:d9:
                    83:c4:97:40:99:41:02:ab:86:35:61:8d:e2:3b:e8:
                    56:69:ca:d4:9d:eb:fc:6a:dc:11:fd:8e:9d:1e:09:
                    5e:f1:ed:e8:26:cc:db:e9:b0:bf:99:79:7b:d6:a1:
                    50:d1:63:a2:0f:a0:29:63:8b:86:72:43:29:5b:97:
                    54:d1:36:0b:49:a6:96:76:0b:7a:d4:5d:0e:ae:85:
                    54:0f:ea:90:70:96:32:e5:a0:60:13:de:89:18:74:
                    b5:68:40:8a:0b:b2:e9:0b:fd:9e:d4:c0:67:6e:5c:
                    31:4a:a0:5c:d5:0c:a7:45:48:ec:9c:ea:30:41:a8:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:03:31:90:5D:3B:ED:82:5E:BE:C3:2C:CB:77:D2:33:8B:0E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4fdd2b5-ac65-35bb-901c-172f695d6fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:48:31:41:ad:3f:f1:51:a7:f1:e4:27:80:5f:98:fe:74:
         ea:56:44:ae:e5:28:38:9d:08:bf:a6:98:53:01:f6:d1:3a:f3:
         59:df:f0:32:08:2b:e9:b5:db:d5:43:16:0e:85:58:59:fd:1e:
         e7:85:aa:94:35:da:24:f2:b6:14:f3:46:0c:4e:1b:99:8c:a2:
         5b:4f:c5:1c:c0:cd:1f:56:85:db:5c:2a:de:11:e8:4a:50:2a:
         79:a1:f4:1a:3a:5d:b7:f3:2a:8c:3b:c4:f7:e2:89:9d:8d:68:
         50:19:40:7f:aa:30:92:9d:39:e5:64:15:92:bd:5f:d4:54:a4:
         24:0b:01:3d:40:94:f7:5a:a9:27:6f:6c:21:08:17:41:af:80:
         03:9e:62:c7:ef:88:21:54:27:92:a8:db:88:42:a1:50:0c:18:
         9e:08:05:0a:ac:9b:25:28:6d:9e:f8:a4:80:95:5f:35:6e:88:
         d4:cf:65:a9:f2:de:4b:9c:82:b3:fe:8e:66:58:19:03:e1:2f:
         dc:ab:b9:50:95:21:d5:cc:b2:5f:93:e9:11:8b:92:85:ed:41:
         14:6f:8f:d7:35:60:24:39:11:1a:22:75:12:6a:ae:f6:77:f4:
         c8:31:47:1c:74:a3:cf:68:91:0d:16:af:90:da:53:69:e9:35:
         c5:c0:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:48 2025 by rpki-client