Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4465050-c8df-3c90-b6be-cf3b6b8eeb85.roa
File:                     c4465050-c8df-3c90-b6be-cf3b6b8eeb85.roa (raw, json)
Hash identifier:          xVsgFYSDl08/mB+GpGJGPexeRrOSA5OuayVW0L0gnDQ=
Subject key identifier:   68:55:82:1A:43:82:AF:91:1A:42:87:70:90:A8:00:8B:F2:E2:49:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CA559A06C2E9E9A88700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4465050-c8df-3c90-b6be-cf3b6b8eeb85.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     25485
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ca:55:9a:06:c2:e9:e9:a8:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d1993593-f5fc-48ab-8efc-77cb4a2f8447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:61:54:0d:c8:50:c0:7f:81:d7:e3:62:db:
                    18:9a:fc:1c:36:ec:8d:22:38:8e:d4:fb:a1:fb:37:
                    5a:55:f0:69:68:8c:08:32:40:75:04:c7:33:f1:8d:
                    5a:24:0a:4f:5b:c4:de:fc:8a:60:01:77:e4:39:3b:
                    4c:0c:7b:71:e6:ec:95:79:19:6f:67:6e:35:ea:4d:
                    cf:11:db:5e:65:55:04:75:02:08:a4:e8:55:48:95:
                    19:76:94:f2:3a:f5:97:f3:52:78:66:32:b5:e9:bf:
                    c4:23:6a:ef:39:01:00:d5:ce:ea:cd:59:f0:f5:d4:
                    44:0a:c6:89:84:73:08:e3:c5:10:15:b3:aa:28:ed:
                    e8:a3:13:2f:08:ef:e3:13:cc:8b:c1:9d:b1:22:d5:
                    e3:e1:91:b4:7b:a9:ac:9b:9f:05:80:da:02:f5:5f:
                    ed:b9:cb:14:f0:19:3e:09:2b:ee:bd:ed:83:07:41:
                    24:a4:a7:69:ef:11:84:9f:2f:55:6e:d2:fd:97:df:
                    ef:7b:38:fb:6f:18:79:64:90:6a:59:de:a2:5e:a0:
                    fb:80:7e:6f:9c:db:05:24:4e:9a:98:55:c8:01:cf:
                    35:0b:25:6d:14:6d:d8:48:92:fc:6c:e4:da:b1:22:
                    cf:bf:14:26:d0:f1:22:72:06:50:c1:90:ef:37:33:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:82:1A:43:82:AF:91:1A:42:87:70:90:A8:00:8B:F2:E2:49:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4465050-c8df-3c90-b6be-cf3b6b8eeb85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:46:76:ee:0c:d9:73:af:29:4e:db:18:8a:c5:d9:4d:2c:fe:
         2f:d3:f8:c5:4e:c9:2e:1c:b1:09:a6:d1:bc:88:e7:f1:e7:ac:
         f7:c9:24:f4:bd:10:68:3f:c0:58:fa:03:1f:ba:b0:43:d3:15:
         5f:7f:09:9e:3b:2b:f9:a7:01:01:ba:dc:62:8f:1a:d1:e2:af:
         e1:34:5e:26:f5:c0:11:a5:12:13:c3:e9:91:f7:57:37:80:2c:
         87:d8:b4:19:a2:d2:75:f2:5d:16:61:53:1a:d6:eb:a8:53:6f:
         c8:a0:8c:7a:a6:a4:13:f5:08:8f:a9:12:1c:f5:8c:d7:f9:a1:
         14:07:44:92:1b:56:a0:15:ec:d3:15:0a:17:58:6e:c2:c6:51:
         16:08:7a:45:29:38:5d:26:1c:e3:04:2f:43:03:39:24:57:ee:
         66:ee:63:72:0c:32:c3:19:eb:37:22:a0:42:30:4b:80:c1:30:
         1c:cf:46:a3:e7:73:48:54:52:82:63:45:61:6f:38:be:d6:42:
         8e:3d:44:86:30:b8:dc:48:62:54:f9:79:33:ea:23:bd:79:18:
         19:17:12:04:21:54:14:7a:28:63:82:d1:c5:4b:ca:4c:b1:af:
         e2:6b:f4:f5:ca:b5:a6:9a:45:25:eb:de:a7:dd:26:63:5a:27:
         01:5f:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:44 2025 by rpki-client