Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7214fca-6bff-3c19-8317-10e3aaf5bce0.roa
File:                     c7214fca-6bff-3c19-8317-10e3aaf5bce0.roa (raw, json)
Hash identifier:          ea+dmGnastYFB7Mz+PwXRJPWZe/EQo6zLgW4l0+Q/tQ=
Subject key identifier:   A6:32:38:6E:9A:88:EB:F7:E2:D7:0D:24:FD:F9:DC:E3:FF:EF:0C:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC52136B66169AFF4F5DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7214fca-6bff-3c19-8317-10e3aaf5bce0.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     396593
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:52:13:6b:66:16:9a:ff:4f:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=66e8eca4-5cf7-45a6-b029-84ef62bd775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:b6:7c:5a:96:df:5a:07:b6:2e:be:28:2b:
                    80:75:e1:6b:ba:70:b7:94:53:8e:74:b1:b6:03:50:
                    f7:c4:ce:13:01:6a:c8:b7:50:d0:6a:12:e7:59:74:
                    4b:e3:00:71:37:d4:06:a5:87:cc:ac:4c:03:17:b1:
                    b0:b7:c2:77:8f:4d:0b:3f:d8:50:f0:06:16:af:d7:
                    cd:fb:04:a6:5a:14:9e:50:32:17:aa:e2:b6:64:28:
                    35:ee:26:e2:53:84:8b:f8:bf:10:38:b0:de:db:f9:
                    41:8b:01:9f:aa:3d:ee:6e:e0:73:55:01:98:1b:f3:
                    39:91:b3:20:85:f8:ca:df:fa:bb:c0:76:e1:dd:9f:
                    be:7f:8f:0a:ad:62:5a:08:5c:3c:7d:46:a7:87:dc:
                    ca:06:b3:85:74:57:34:f1:29:0d:b2:84:4d:e5:6c:
                    2a:ce:bf:cc:02:d3:2e:ae:3b:74:dd:db:80:26:33:
                    b0:a8:70:c2:48:ec:bf:1f:f1:eb:ef:cb:e2:bb:5b:
                    ee:6e:dc:86:27:85:5e:87:ee:b4:eb:9c:9e:40:34:
                    fd:56:2b:9e:5e:04:de:46:ce:97:6f:de:9b:7d:fc:
                    5c:8f:e7:7b:c6:52:81:17:f7:51:75:8e:98:7e:53:
                    76:d8:0b:7b:bd:2a:d1:c5:b4:1f:de:f3:30:ec:00:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:32:38:6E:9A:88:EB:F7:E2:D7:0D:24:FD:F9:DC:E3:FF:EF:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7214fca-6bff-3c19-8317-10e3aaf5bce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:68:61:85:d4:50:cd:d8:96:85:19:47:b7:85:19:af:37:fb:
         75:b1:18:2e:fc:61:07:82:3a:df:d8:4e:f9:bc:9b:05:e5:2d:
         a7:19:01:16:3e:13:04:7d:6b:41:8c:59:51:58:f5:61:69:7a:
         6d:de:ac:f1:42:12:89:a2:ab:32:cd:e1:af:a2:3f:1a:ee:e4:
         90:c3:3a:97:90:e8:c8:3f:5e:72:10:ed:56:03:e3:7e:67:c7:
         5d:38:d7:20:4f:61:72:48:ef:5a:12:b9:f9:44:ff:83:28:9c:
         70:4e:d9:1b:91:4b:8e:43:bc:77:c4:00:c6:b7:02:9d:e4:63:
         21:48:80:4c:37:40:73:78:5c:a7:93:05:ab:90:6c:d9:20:b7:
         c3:c6:0f:06:58:2b:d1:f1:c5:78:3c:c6:46:4b:da:e8:e1:ed:
         cb:26:bd:f5:32:df:e3:73:87:6e:e2:77:64:a6:27:67:6f:1c:
         2d:cf:8b:f3:52:e8:da:55:ac:bb:24:d6:d2:89:a5:87:27:a1:
         8a:e2:67:ad:7b:84:9d:b3:42:14:73:fd:5c:4c:d6:8a:a5:87:
         7d:2b:4a:64:29:a3:8a:5c:50:a3:f2:c7:13:ee:89:ed:a3:fb:
         92:08:af:29:e4:b3:2b:23:7d:0c:e7:ba:5e:f4:da:df:70:10:
         13:12:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:17 2025 by rpki-client