Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a46e03-968e-3dd5-9196-c5a6ff7051ad.roa
File:                     c3a46e03-968e-3dd5-9196-c5a6ff7051ad.roa (raw, json)
Hash identifier:          9veJqDjU+HO7imQ/q0ILuseClzcjUIEZmZCKCOI+ry4=
Subject key identifier:   D8:86:D4:C5:38:09:60:DA:A4:25:00:5B:1F:FD:36:AA:32:23:0D:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F9C4A5085EE893AB9000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a46e03-968e-3dd5-9196-c5a6ff7051ad.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     32651
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f9:c4:a5:08:5e:e8:93:ab:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f57db11d-02b0-4a6a-9f4e-8a30135e8480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:e7:8b:60:02:70:87:82:c9:ea:97:c3:80:
                    f2:51:37:99:1e:8e:3d:36:70:d4:b7:76:a8:fe:34:
                    aa:b2:e1:bc:5a:fa:e8:b7:3d:8f:93:fc:9c:05:aa:
                    ff:18:e2:89:79:53:fb:20:a3:41:b7:ee:6c:f3:76:
                    53:67:25:29:1d:ac:6e:be:e9:81:54:84:f6:98:9a:
                    d9:b0:b0:8f:35:d5:b9:a9:bc:7e:8b:75:3b:22:42:
                    f3:d4:93:99:04:c7:3d:8a:ce:2c:40:2c:87:2e:ee:
                    11:ba:18:cf:6c:e7:6e:b2:19:5b:33:4d:c1:83:45:
                    27:75:cf:88:79:ee:4c:e7:4e:8b:b9:82:f2:74:c4:
                    73:61:a6:e0:03:e8:01:f3:82:68:08:db:98:74:74:
                    ad:b7:43:bf:18:f8:c3:aa:f1:90:73:f4:69:e2:b8:
                    1c:e8:f3:6f:25:91:82:b6:b1:a6:6b:ca:26:96:d8:
                    28:56:5e:6d:85:b1:1b:4b:3b:9b:73:7a:ba:60:ee:
                    05:f7:5b:64:64:73:65:17:40:bb:14:3f:89:95:eb:
                    13:79:19:d1:72:5f:54:63:6c:b7:4b:66:71:95:53:
                    e2:1e:d7:c0:59:4a:99:2d:f2:c1:5c:e9:91:08:0c:
                    3e:85:7c:d3:b4:ed:a0:f5:13:73:e8:c8:52:24:5a:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:D4:C5:38:09:60:DA:A4:25:00:5B:1F:FD:36:AA:32:23:0D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a46e03-968e-3dd5-9196-c5a6ff7051ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:73:1f:71:80:e7:88:2e:0a:b2:99:07:ac:ca:42:ee:05:
         53:c5:38:83:7d:9d:3c:f2:d3:54:76:fa:36:d8:1b:c7:5d:09:
         37:3f:a7:9b:67:d7:18:2a:f0:37:17:54:2d:cc:d0:fe:c5:0a:
         e5:94:73:ef:5b:ac:d5:79:d8:d7:74:5f:61:08:80:ed:8c:76:
         88:f0:fd:56:02:22:4d:7a:ee:72:9b:7a:2b:8f:30:24:2c:31:
         fe:38:b2:40:6a:33:b6:90:c9:30:53:13:58:a2:15:fa:63:8d:
         fa:3f:6e:8e:27:14:a3:78:3a:a3:69:bd:5a:ad:82:da:44:1f:
         8e:3d:0c:c9:3b:cb:86:a4:d5:b6:6b:e7:da:e9:9a:80:bf:7b:
         57:63:46:df:45:65:83:2d:77:2e:b3:5b:3c:cf:73:6e:31:97:
         31:68:2d:f4:b2:12:3c:98:f8:86:77:01:7f:92:e9:ca:8e:65:
         54:94:22:d0:14:d0:16:f2:f9:ff:7c:4b:cb:7e:15:e3:11:9f:
         df:d5:35:7b:2b:d8:25:1b:d9:48:89:2b:60:98:86:d8:54:86:
         a8:79:e1:8f:e5:f0:bc:a4:d1:1e:22:47:3d:04:c9:3b:eb:85:
         96:07:de:dd:6d:52:27:cf:03:20:48:83:28:bb:5c:d6:1e:3f:
         2e:ce:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:11 2025 by rpki-client