Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
File:                     c3bab711-1fdc-38fc-bd8d-74a23887793e.roa (raw, json)
Hash identifier:          rSZz0czQ4AKPwVrecRPQG2fyW7ueoedfk6qO5toOjyc=
Subject key identifier:   41:18:43:FC:49:A1:34:2C:9D:6D:39:43:25:88:1A:E1:AA:F8:79:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AD7D1432F57FF52859F7E3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396582
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:43:2f:57:ff:52:85:9f:7e:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f69b6b56-d2b5-48bd-85eb-ec4483cba5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:4c:8f:49:6a:9f:6b:59:73:ea:b0:71:f4:
                    6c:46:6e:93:cb:ba:85:75:30:e8:02:a7:01:a9:66:
                    44:aa:0c:bf:4b:a9:ad:88:83:ac:b8:e8:71:b0:ad:
                    b4:61:4e:9f:2e:31:47:b5:6d:8a:a7:29:f0:e6:c8:
                    28:1c:42:49:13:8f:56:0a:6f:b4:e6:b9:d9:08:4c:
                    56:b3:d9:3e:a1:20:11:6c:0c:ac:f2:42:df:80:49:
                    9c:52:2c:19:4f:56:63:ec:ff:fa:f8:4f:23:d8:51:
                    bc:63:fe:dd:9a:c4:5d:8c:72:a5:98:3f:1f:72:54:
                    d5:cd:46:c8:3e:a6:e8:1c:46:7a:b8:27:85:29:a1:
                    2a:97:93:06:4c:43:dd:71:e8:3f:9b:4f:c3:f2:9f:
                    d3:bf:4b:0f:72:fc:24:63:e6:39:1b:8c:dc:56:76:
                    54:03:b1:f9:d0:49:cf:46:06:86:8b:99:26:21:57:
                    6b:f1:e7:0d:d6:57:ba:9f:1b:32:87:41:79:f4:c5:
                    61:92:e9:ad:ed:e0:60:52:c5:3f:25:f1:80:0c:c7:
                    a1:b2:b7:af:ae:7a:5c:a4:49:0d:c4:7a:28:73:ef:
                    ae:f6:dc:c8:3f:1d:f1:31:75:9e:ae:68:53:85:2e:
                    d2:95:0e:b7:1d:02:42:75:72:68:3e:0c:1d:d8:35:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:43:FC:49:A1:34:2C:9D:6D:39:43:25:88:1A:E1:AA:F8:79:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:10:67:ce:14:f1:27:30:79:82:57:9a:fd:7b:c7:13:fd:
         d6:0c:1f:36:a7:61:cf:00:7f:91:06:8a:ba:8d:57:63:76:0d:
         2e:ae:a2:42:cf:34:04:e5:d6:da:34:98:42:69:16:09:27:29:
         38:97:bd:56:b2:8b:f5:39:99:02:bb:f9:2e:4a:2a:6c:98:f1:
         df:f1:4b:96:92:07:99:70:e4:f6:de:14:69:1b:5a:60:9c:86:
         ea:a8:1d:2d:78:c5:0b:24:da:c3:51:f4:cf:8b:68:9b:05:43:
         c1:d3:0a:04:cf:c7:17:21:24:de:aa:69:d7:48:21:b4:3c:55:
         23:57:e7:ec:86:89:7e:29:76:46:82:f8:67:8e:26:f3:25:32:
         f6:db:e4:b7:09:c2:9d:f5:c1:96:ee:63:f6:bf:6a:13:89:28:
         8a:09:48:84:05:f2:b3:5f:9c:a3:42:7d:4d:c1:42:cc:f7:06:
         ef:41:dd:cb:4c:ff:b5:f9:e8:b1:f6:91:27:5c:01:1c:60:78:
         ce:9e:6b:17:52:59:c1:ad:76:6b:16:24:fd:98:ba:18:dc:d0:
         e5:19:c4:d0:8f:38:2f:38:dc:67:e9:a5:50:61:5a:24:35:d5:
         fb:03:b9:49:20:76:cb:25:39:a8:df:f2:f6:d0:92:a4:0c:ca:
         44:1f:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:26 2025 by rpki-client