Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c91392ab-2676-35b6-92ec-fe2f475bddfc.roa
File:                     c91392ab-2676-35b6-92ec-fe2f475bddfc.roa (raw, json)
Hash identifier:          3dllWV8haerA58YlrB77YVu1Ch16DXQWTcwnVJAfUeU=
Subject key identifier:   02:1D:68:D4:7C:D7:84:9F:84:2F:8F:85:6C:A6:65:AB:E9:A6:38:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FCC441B7EB2A409C6D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c91392ab-2676-35b6-92ec-fe2f475bddfc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397202
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fc:c4:41:b7:eb:2a:40:9c:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=696c1df1-79c1-4688-9b3e-5f73c8baf68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:a0:5e:65:02:af:cc:11:fe:0c:4d:b5:68:
                    b0:a0:b1:ae:9b:e4:e0:79:8f:f2:b6:fb:ba:e2:b3:
                    d9:4c:ff:fc:bb:d7:c9:87:1f:da:e6:61:df:0d:6c:
                    07:08:ba:fa:6e:3d:83:51:e7:06:11:81:4e:b9:e6:
                    d8:49:91:a6:21:1a:01:14:d6:e5:14:69:d3:bc:f4:
                    77:da:af:52:a9:40:c6:2a:50:b1:da:0c:67:12:40:
                    16:3b:14:18:d3:21:65:8b:0a:e0:14:7d:f0:41:3d:
                    7f:d2:fb:e2:f4:e8:d2:1f:29:33:95:7c:64:34:3a:
                    19:17:bb:b8:4e:43:c4:d4:cb:72:66:95:53:5c:c9:
                    7e:7b:60:ee:15:72:ce:24:b9:68:0c:05:bf:fc:25:
                    a0:18:a5:5e:ad:69:9f:74:33:59:20:5d:e7:16:72:
                    56:fa:5a:dc:5d:d4:56:ca:df:21:a9:34:6c:5b:9f:
                    31:88:bf:dc:6e:2f:99:64:52:a6:ff:dc:65:b7:87:
                    61:2f:9d:7b:76:40:d6:95:4d:96:62:4e:86:f7:1c:
                    fd:35:a2:09:ea:34:90:22:6f:9b:91:7c:85:35:18:
                    cb:0f:53:92:f0:98:a0:52:2c:24:10:9d:d5:8b:52:
                    be:cd:a7:54:f0:63:b3:71:1e:d1:75:41:23:4d:b9:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:68:D4:7C:D7:84:9F:84:2F:8F:85:6C:A6:65:AB:E9:A6:38:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c91392ab-2676-35b6-92ec-fe2f475bddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:90:03:fc:ff:5d:27:8f:e4:fb:56:54:2c:e9:e1:19:17:
         c8:b2:20:bf:28:01:9f:9f:77:b9:5b:22:68:c6:dc:3a:f6:ec:
         20:6a:94:9c:32:28:44:f5:44:a0:0a:d3:2c:ac:3d:37:18:df:
         b8:b5:c0:a0:b0:e0:40:33:a0:47:56:07:2f:f7:17:9c:aa:15:
         d4:be:58:eb:4a:20:bc:1f:a8:70:1c:b9:cc:81:e4:6f:11:23:
         4e:2e:5d:46:5c:a8:00:96:67:7b:c5:20:43:bf:1a:0d:10:fb:
         c5:e2:38:66:09:81:8a:10:42:c2:f3:7b:08:0a:a7:3a:14:03:
         4a:87:57:93:d4:3a:aa:8f:d8:5b:08:70:ef:63:11:65:15:dd:
         0b:aa:2c:af:de:32:d4:bc:b9:ba:c9:b5:23:2b:fe:0a:16:4c:
         1c:45:a2:55:2c:c6:ba:4c:e4:47:7c:bd:72:c0:a9:c9:47:2e:
         83:24:a9:8d:a9:34:51:87:be:79:9d:c9:55:4a:2b:f2:e5:6c:
         1b:a0:9f:1a:02:34:72:96:06:38:ac:39:de:19:db:0e:fd:60:
         25:cb:af:62:58:2d:0a:e9:ab:d1:1f:43:23:d3:5b:32:be:4a:
         b4:c9:a0:2d:bc:cb:61:0c:dc:03:11:a0:b8:b4:03:1e:63:a6:
         6a:45:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:18 2025 by rpki-client