Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa
File:                     ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa (raw, json)
Hash identifier:          7PqT8WTW7XPlpgs35IBKbIaN9WYcwMFaRNMndMMFJeE=
Subject key identifier:   C4:4C:41:8D:62:65:F8:1E:95:F9:C0:83:FB:04:F7:A6:00:AD:61:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F3B277325E72C402EE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396564
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f3:b2:77:32:5e:72:c4:02:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=446ac900-0b29-45fb-9eae-304c730f2070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:09:cd:a5:d2:cf:5d:33:b9:14:af:0a:10:
                    fc:0e:58:2a:4d:55:62:98:6d:90:61:55:73:e0:f3:
                    df:c4:d1:6f:34:4a:1b:54:ce:9b:93:b3:35:43:51:
                    55:97:4e:0b:57:6c:74:a5:7a:13:73:11:27:a8:bb:
                    f2:a3:ce:6e:4c:c1:d0:6c:39:b3:e3:b4:da:a1:7d:
                    b9:95:f7:dd:83:7a:e2:56:49:5f:b1:4a:5f:c3:19:
                    e2:8b:15:4f:8c:65:b5:81:8d:50:a0:2f:fb:bd:8b:
                    61:7d:04:7f:ee:03:75:9f:18:4d:f0:e9:3e:8d:f7:
                    0b:e6:bb:e9:34:c1:54:89:dc:34:76:8e:d3:27:a5:
                    df:3d:2f:80:d8:51:ad:33:3f:12:cf:8f:3c:cc:93:
                    e0:8d:b5:60:a1:dd:c6:c3:53:db:69:79:e1:c9:f6:
                    41:2a:b0:61:05:84:6a:60:a6:64:0d:af:8b:9e:5e:
                    06:6c:9b:2f:0b:3b:8c:f0:b9:e1:72:57:e7:a9:5a:
                    9c:de:82:ef:bf:55:fc:e7:bc:10:13:35:a5:ac:8d:
                    bd:ef:30:42:60:95:6f:92:f1:5c:2e:5d:84:f2:b7:
                    35:1c:45:d0:59:c1:df:9b:e9:c1:1c:95:c6:cf:c3:
                    57:c4:05:17:8b:72:55:48:67:31:14:09:2d:46:d8:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:41:8D:62:65:F8:1E:95:F9:C0:83:FB:04:F7:A6:00:AD:61:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0e:83:9f:bf:c9:e2:bf:8e:ef:2a:40:c0:80:47:f6:cf:75:
         45:9f:29:ad:8c:6a:6c:6d:4e:3b:ce:73:d1:dd:97:64:7d:f5:
         e6:f9:28:ee:5c:ac:92:b3:0b:50:35:0b:b8:ac:6c:59:88:ab:
         1a:4a:48:b8:01:9a:94:ed:8e:57:5d:17:eb:e7:8a:40:8d:f7:
         cf:af:04:72:50:33:03:88:36:4a:a0:e5:2f:48:00:8e:df:4f:
         0f:fe:47:01:8d:c2:ba:90:22:a7:d0:28:b3:50:07:01:66:bb:
         6b:56:7b:8a:e4:7a:03:2f:28:44:f7:64:bb:f4:f4:1a:64:2a:
         45:8a:2f:40:03:c6:f6:98:5a:26:d2:26:37:7b:4a:26:ae:74:
         78:62:38:e0:2a:79:fa:74:73:a4:c7:8e:17:8d:a3:eb:cb:71:
         02:8f:4f:ff:60:16:b5:dd:9f:a8:ae:d4:42:dd:fe:ed:b6:ad:
         1a:0d:59:07:12:f9:0a:42:67:94:3d:64:81:ce:40:84:d7:13:
         93:57:87:8d:9b:5f:27:55:ae:a1:b4:9f:1c:a9:4a:0f:dd:8d:
         a9:ed:56:f5:4b:aa:d0:f4:aa:2f:b8:b6:13:df:2f:fd:03:2a:
         fe:28:d8:b9:0f:af:82:e2:2f:ad:ee:fb:e2:f6:b1:9e:14:0e:
         2e:8d:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:19 2025 by rpki-client