Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce57a27-71e5-3102-b6eb-85e70bd4190f.roa
File:                     cce57a27-71e5-3102-b6eb-85e70bd4190f.roa (raw, json)
Hash identifier:          2V+nMdgE1PyY0XReEV2jtWY74Bw2GvorzvfQCnqQbC4=
Subject key identifier:   FB:D4:86:59:DB:2D:13:36:BE:3B:87:FF:CE:FE:04:6A:0D:EB:B4:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FA69F875841433A1B930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce57a27-71e5-3102-b6eb-85e70bd4190f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396827
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fa:69:f8:75:84:14:33:a1:b9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=18ce88ce-5d3f-45d9-8fca-01614ee8f071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cb:23:45:15:a7:bc:8f:e4:46:c0:16:03:42:
                    fe:8e:75:df:6c:e2:8a:e1:b0:01:10:9b:36:f0:31:
                    4c:92:8a:0b:ad:c9:ec:f7:0c:10:5a:84:b1:a1:5c:
                    5c:66:0f:3c:f1:18:ab:5a:fc:c7:d0:03:51:82:01:
                    ef:85:67:7f:c7:37:1f:7e:de:56:01:89:59:a5:64:
                    43:87:55:90:9e:13:33:1f:03:8d:1e:5f:c9:2e:16:
                    b9:f0:ed:5e:3f:e9:07:98:f3:47:7e:53:a4:76:63:
                    af:f0:ec:7b:64:a7:76:22:24:5b:c2:99:0c:3f:44:
                    a9:9c:39:7a:62:6d:e7:42:94:a0:5f:e6:5b:9d:eb:
                    c7:e9:f1:ec:23:f2:ae:f9:93:b7:5d:b7:37:96:bb:
                    5e:d9:c0:31:77:ee:bf:79:ce:e2:d5:8b:e1:a2:e0:
                    a3:3b:50:22:f4:c9:a0:91:a2:d8:31:ad:1d:e6:ea:
                    c0:e2:76:32:1d:bb:a8:cb:88:54:db:ad:cb:29:c5:
                    8c:a5:39:ea:15:93:d6:3c:09:ff:e4:b5:7e:2d:74:
                    c1:8c:e5:9e:c2:d2:98:fa:9e:e1:6c:4f:00:56:91:
                    50:51:c3:4a:f1:40:47:60:8c:0d:fb:83:4e:fd:92:
                    36:fb:36:0a:9c:c2:57:ba:cf:c9:a3:8a:47:ae:b9:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D4:86:59:DB:2D:13:36:BE:3B:87:FF:CE:FE:04:6A:0D:EB:B4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce57a27-71e5-3102-b6eb-85e70bd4190f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:32:d6:94:4b:bd:fc:f1:19:12:98:ce:1a:f4:b4:bd:41:
         20:be:26:91:2d:8e:0e:3c:07:0d:2b:3f:13:3b:cf:99:63:cc:
         80:0a:4a:32:ff:3d:46:e5:9a:03:75:78:03:17:93:c2:dd:c1:
         ed:2f:7b:3b:24:e4:0e:62:42:c7:f1:48:18:23:cf:03:05:6a:
         1e:b2:73:df:25:07:40:8b:10:88:03:bc:19:f5:38:9f:1d:df:
         55:6e:63:91:af:c8:3b:96:22:69:aa:49:7b:e4:b2:f9:14:bf:
         47:63:90:0f:35:e2:fd:cf:28:57:4f:05:fc:af:cf:3e:b2:29:
         31:39:7d:68:f6:ad:b0:23:cf:8e:a8:19:d5:e7:cb:07:a6:91:
         40:fc:19:5b:37:e9:51:77:b7:0a:31:cc:fe:cc:00:b5:02:10:
         cc:1f:9b:91:8f:be:3a:c7:e2:c2:71:b9:8e:39:cf:05:92:08:
         90:f7:ff:16:0f:4e:39:4a:d5:c9:fd:1a:e6:a8:44:30:6e:ee:
         0f:42:c1:23:0f:49:4e:d3:3d:22:b4:25:b0:4d:39:58:6c:9e:
         73:d0:ab:2b:7c:36:45:59:b5:a5:e4:ce:cb:84:b1:f8:cd:ac:
         28:dd:a2:37:11:48:91:9d:76:8b:27:94:40:60:35:a0:5e:c3:
         50:83:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:52 2025 by rpki-client