Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c420be91-b3d9-34bd-953e-8c5031f26275.roa
File:                     c420be91-b3d9-34bd-953e-8c5031f26275.roa (raw, json)
Hash identifier:          jN0iIIlRL0HbVWRXingwc0I51+0lwUjCIKwp1bqrE40=
Subject key identifier:   74:0B:18:EC:91:5B:AB:D3:00:DF:B6:06:40:FA:5C:3E:B1:42:B1:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D3CDE1DB06CC743D7D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c420be91-b3d9-34bd-953e-8c5031f26275.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396588
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d3:cd:e1:db:06:cc:74:3d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=aac77396-a466-4c74-8ef3-929497d9cc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:6b:4c:2e:ee:ed:61:1e:d7:45:e1:dc:89:
                    1b:79:86:d4:00:fb:2c:c9:26:71:7f:ac:6d:59:2e:
                    42:96:2f:3e:dd:f5:80:4f:18:89:64:4b:91:1c:8d:
                    49:85:00:04:e4:16:ce:e2:32:c4:0c:9a:73:e2:f2:
                    17:56:22:2a:00:9c:c3:dc:87:31:0c:49:94:1f:67:
                    05:28:86:4e:0c:0c:c9:5f:5c:09:44:53:d2:b6:b0:
                    74:e6:74:1b:8a:54:68:5a:32:51:87:e0:ea:22:2b:
                    ed:e9:98:bf:b3:53:98:16:4b:8e:4c:43:e0:59:8a:
                    58:f5:da:31:8f:69:02:0d:e2:af:76:ed:ac:f3:66:
                    a8:04:8f:b3:32:1c:08:f4:88:0e:44:f5:fc:94:f2:
                    15:46:64:bc:b3:11:2a:46:2a:a4:e5:34:96:09:e9:
                    fe:f4:7a:4d:d7:35:88:6b:6e:67:86:b3:e2:fd:f5:
                    64:d3:b5:57:ee:6b:ba:34:fc:f1:b0:e4:70:76:d2:
                    42:ca:e3:10:3c:e9:47:be:9a:0a:92:ec:ee:71:0d:
                    3a:06:65:cc:62:69:76:91:87:3b:39:5d:21:25:d4:
                    6b:bf:9e:93:33:70:88:37:f2:d6:69:94:cc:a9:e5:
                    33:59:86:8d:50:56:ae:ed:0f:38:52:72:a0:b2:fd:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0B:18:EC:91:5B:AB:D3:00:DF:B6:06:40:FA:5C:3E:B1:42:B1:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c420be91-b3d9-34bd-953e-8c5031f26275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7b:92:a7:11:33:52:9e:98:04:a1:06:cd:03:01:79:af:7d:
         c5:17:52:0a:12:83:c6:3d:c1:2e:5b:81:0b:9e:88:ee:b7:b0:
         8f:6b:01:96:e3:4e:2a:a9:cb:80:38:ca:7b:b4:a4:24:41:a4:
         95:e2:dc:80:70:3d:24:bc:88:c9:32:c8:9c:19:49:eb:fd:56:
         35:ef:5d:ea:4e:98:62:54:08:eb:89:25:b2:ca:e2:08:16:dc:
         63:0b:99:4f:4e:8d:39:ee:e4:f4:92:a7:14:53:35:ed:bf:81:
         8d:14:bb:f2:9a:d0:c2:fc:85:b1:fd:bf:94:f7:dc:1d:f7:6f:
         60:f7:12:9b:02:ac:d1:df:3c:e6:9a:53:1e:e8:b2:50:9b:42:
         6f:aa:55:d3:3e:9b:00:8a:fa:e8:a4:c3:db:82:06:06:43:9c:
         24:df:f9:5b:b7:1e:58:6a:32:98:59:e5:30:4f:43:71:1a:1e:
         9d:13:4e:50:04:25:13:b6:5a:5d:da:6e:dc:2c:ac:18:d1:79:
         db:78:4e:45:54:37:dc:61:58:b2:dd:e8:24:c1:29:7c:27:5d:
         a7:c5:aa:a6:a4:e4:d3:03:66:ce:b8:fb:49:1f:b5:6b:e7:1d:
         09:b2:5c:0f:42:65:c7:ad:91:da:20:8a:b9:8f:37:03:af:e0:
         83:10:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:11 2025 by rpki-client