Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be6c0b5d-ee84-3398-a0dc-fa1df86c67ff.roa
File:                     be6c0b5d-ee84-3398-a0dc-fa1df86c67ff.roa (raw, json)
Hash identifier:          OftMmTaHmn99aGGtdSwRuTp5B2KN1HBsN+CnFFS5DIk=
Subject key identifier:   CF:46:E8:5E:CB:03:17:74:A1:D9:BB:AF:60:B0:09:87:F2:C2:14:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F1EA8ED88057466DF500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be6c0b5d-ee84-3398-a0dc-fa1df86c67ff.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396573
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f1:ea:8e:d8:80:57:46:6d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=81fbbf33-1f48-4778-bfeb-689b8e440d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:9f:85:ab:85:81:21:eb:75:2f:10:e3:73:
                    45:b6:e5:57:e9:eb:1f:7b:6a:b1:c7:13:34:86:9f:
                    54:67:6d:c2:78:8f:69:1a:25:a1:04:e2:ab:3b:64:
                    32:05:d7:54:88:5b:1c:a6:36:d4:22:4e:ae:9a:a2:
                    ad:7c:74:0f:3b:34:2f:fe:82:01:1e:f5:6c:a2:d4:
                    d0:23:4b:20:8b:52:42:de:ae:29:1e:5c:f7:38:89:
                    16:e5:c3:51:47:9e:e7:35:c4:d0:62:00:1d:a2:4c:
                    a5:56:f8:fe:d9:1b:86:60:d1:e0:b5:38:d1:e2:eb:
                    7c:9f:8f:e5:18:0a:bc:03:e5:19:a4:31:af:30:f9:
                    61:d7:43:8e:e9:a8:11:fb:92:04:1c:f5:78:85:68:
                    08:49:c3:9e:06:33:2e:b5:a5:d6:7e:fd:88:d3:6a:
                    9d:48:10:e6:9a:ab:74:95:a8:bf:be:1a:f5:b9:0e:
                    be:23:d2:ec:04:f0:d4:45:cd:0d:dc:09:4d:c2:5d:
                    84:16:92:25:ae:cb:e3:cf:15:73:4f:38:5c:f1:bd:
                    41:27:09:d2:a5:b4:4d:96:9a:27:4f:43:1d:51:2c:
                    6e:88:73:8c:4d:3f:d9:55:74:ab:4b:b8:c2:2e:22:
                    e0:10:30:cb:90:b4:5d:08:01:ec:1b:fe:91:1a:e7:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:46:E8:5E:CB:03:17:74:A1:D9:BB:AF:60:B0:09:87:F2:C2:14:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be6c0b5d-ee84-3398-a0dc-fa1df86c67ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:b0:6e:7b:90:6c:2c:1b:b7:a1:06:c1:f0:cf:3d:3b:a8:
         20:e9:f3:9a:f7:33:8f:74:c7:ff:7f:93:18:31:42:39:fd:a1:
         73:d9:4f:cb:f0:f9:1d:cd:43:81:04:27:ed:e4:76:4c:08:df:
         00:5a:33:9d:44:39:9a:ed:bf:0d:ed:81:d8:e6:fa:dc:86:00:
         9f:5d:d2:3b:db:ca:99:5e:46:15:48:fd:fa:29:d8:a9:6c:ce:
         f2:f9:28:5f:1b:98:6b:dd:66:de:71:2c:e2:7c:9d:c8:dd:e9:
         73:83:5f:df:9c:f8:d0:61:f3:81:8d:83:34:84:a4:d5:28:54:
         5e:6e:7d:f3:47:9c:90:20:af:9a:6a:d1:ee:bd:37:bd:2d:e2:
         d9:16:a1:0f:84:ab:7a:07:3f:bc:a0:6b:eb:79:03:82:bd:7b:
         46:4f:66:d7:51:58:19:7e:90:26:b7:5d:22:f4:c3:56:40:85:
         de:f0:8a:0b:25:5c:e8:fa:14:b1:d8:e5:04:49:0c:8d:47:9e:
         2e:3d:e8:19:42:c1:a2:2a:a6:b6:07:bd:e2:7a:f0:82:1c:2a:
         d9:c2:aa:7c:df:ad:98:4d:ab:82:43:54:c9:94:3d:9b:1c:5c:
         2d:e1:b5:47:38:ef:b2:87:80:8a:b3:7a:00:bd:1b:48:48:3f:
         31:88:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:40 2025 by rpki-client