Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa
File:                     c7377bb9-35b1-3509-a53b-73c98b2037ba.roa (raw, json)
Hash identifier:          GqHzWf9tKIsyCbkr1zNZHg5IGySqDkWfy9/prABDV2A=
Subject key identifier:   D8:B2:BC:9F:C0:E5:FB:90:C8:6E:5E:3F:9B:CD:CD:88:8F:BA:69:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF7152D527130A392A3D2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     396541
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:15:2d:52:71:30:a3:92:a3:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=5c4ab17c-a238-4a61-8fc5-d13f74f81aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:99:2c:9f:b2:5c:ee:fc:3a:91:5d:03:9f:
                    94:a4:85:a6:a0:41:89:f0:31:63:f6:bc:6e:12:3b:
                    a2:a6:21:f5:65:7e:4f:f2:3d:8a:cc:2a:e9:df:5b:
                    e6:a3:71:f8:38:40:22:d0:07:53:f2:b9:7b:eb:f0:
                    e1:b5:f0:1d:ca:10:03:1c:b6:4f:f7:5a:26:0d:5d:
                    fd:3e:d1:03:fa:c6:fc:d9:55:79:ea:4d:72:5a:89:
                    1f:11:a9:51:79:ce:fe:71:43:e4:c6:4c:f0:4b:28:
                    92:e2:66:7b:d3:64:97:93:9c:75:c0:62:eb:f1:dc:
                    54:e7:79:10:61:a0:7a:cf:17:3a:da:3d:9c:bf:87:
                    df:2e:f3:98:4a:6b:c4:f3:90:ba:31:4d:38:e7:0f:
                    8b:31:e4:65:5c:0c:d2:0f:67:ba:c4:9f:a3:47:29:
                    ad:52:dc:a4:c8:45:7c:e7:4f:69:2f:ee:45:6d:fe:
                    fe:9f:0d:0c:8b:2f:ae:ac:ff:84:38:ad:b0:fb:f4:
                    ed:f2:73:29:32:cf:44:60:a6:41:ff:ab:a0:ea:13:
                    77:de:e7:dd:e8:b5:ca:df:89:e0:cc:ac:6c:c9:56:
                    dc:8d:ae:d2:2e:1d:88:b4:96:4e:aa:ac:b1:3b:e0:
                    99:c3:df:dc:9c:1b:e3:96:3e:9f:f4:74:f9:c0:9a:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:BC:9F:C0:E5:FB:90:C8:6E:5E:3F:9B:CD:CD:88:8F:BA:69:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:86:5b:94:2f:d4:04:26:f0:3b:19:28:2e:99:36:9f:8f:29:
         e4:2d:00:58:9e:d2:15:80:a7:b2:65:11:bd:cc:60:53:7c:25:
         84:0b:c8:13:c4:2e:97:77:8e:bf:4d:ac:8d:ff:3e:2c:64:49:
         fa:5e:56:52:cd:1b:a2:e3:af:50:f7:16:b4:20:62:a3:fd:d1:
         2a:9c:6f:ee:a8:b1:ae:f7:60:b5:e2:68:1d:1a:41:c6:56:f7:
         05:e5:17:0f:de:71:e7:f3:26:d0:ce:43:0d:c5:36:17:bb:f7:
         23:aa:af:95:f3:e4:26:b0:02:bf:c2:51:74:d1:ae:7c:16:24:
         ff:0e:c6:b8:40:5b:ff:77:c4:98:ee:7c:76:56:39:d9:23:7b:
         eb:ae:b0:4c:2d:8a:15:8e:4c:08:e0:3a:93:e1:48:15:bc:be:
         51:ba:c6:21:01:51:2f:92:95:3a:8b:b3:d5:4d:e5:33:54:a8:
         95:60:53:9c:3c:14:80:ca:bd:a9:0b:74:28:e7:a9:4b:87:56:
         1c:68:fc:bc:63:e3:ce:39:1e:e5:62:e1:58:b5:9e:7a:3f:9c:
         d5:18:04:f2:85:a0:47:68:b9:17:69:3f:10:0f:d3:52:ce:2c:
         50:0b:cd:b4:d9:e3:e5:2a:e7:49:59:9c:c3:67:40:e6:44:d7:
         ea:51:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:10 2025 by rpki-client