Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d18c3873-1804-3d55-b98a-312cc0480507.roa
File:                     d18c3873-1804-3d55-b98a-312cc0480507.roa (raw, json)
Hash identifier:          mG4cRp4uCgeeSZGi/YwoX/wtiAwOc8dyUH/jfHi1ibo=
Subject key identifier:   64:CA:F5:4B:66:BC:E4:25:FB:7E:C6:79:AC:29:2B:DF:1A:C8:27:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F67BDC04686815E3211C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d18c3873-1804-3d55-b98a-312cc0480507.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396575
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7b:dc:04:68:68:15:e3:21:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=538eb361-fd23-45a1-88ad-7f158daff719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:98:5f:e0:fe:c8:f4:f5:39:75:f3:5e:10:
                    e0:ec:62:10:77:4d:02:69:61:ef:3d:fb:5b:3f:9f:
                    79:e0:aa:21:58:3a:95:fa:08:c6:d6:93:20:80:36:
                    eb:cc:f9:04:7b:95:59:ec:8d:71:a0:76:58:3d:35:
                    ea:a4:23:23:2d:70:c1:7e:50:3b:74:b0:15:9a:c6:
                    6b:9c:bc:9b:f5:59:b9:fe:a2:14:01:0a:ba:43:8d:
                    c8:65:26:5d:23:19:f0:0e:89:b1:41:35:5b:68:18:
                    99:c3:50:75:8e:bf:6d:41:62:41:e5:53:ee:71:81:
                    a0:7c:d2:f3:16:2b:de:82:75:8e:f8:f3:d2:29:6c:
                    c1:3a:8e:d1:90:6d:a0:d7:a2:3d:68:f5:e7:55:97:
                    d8:59:dc:bf:d2:ca:9c:64:42:4f:e6:0d:31:bd:4b:
                    fb:35:03:0c:d0:39:59:ec:e7:6b:33:54:86:e8:2d:
                    32:af:1c:7e:9c:27:ee:15:fd:58:af:d7:d4:c5:bb:
                    32:52:a6:55:69:14:13:86:71:1a:6b:81:96:bd:8a:
                    e9:d5:21:33:83:91:6c:c2:e3:3c:86:45:ae:b8:7a:
                    cc:f7:b0:46:e1:d1:bd:9e:cd:e0:0e:f3:59:bf:3a:
                    a2:24:88:a6:15:5f:d3:49:1e:6e:c1:b7:79:08:c0:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CA:F5:4B:66:BC:E4:25:FB:7E:C6:79:AC:29:2B:DF:1A:C8:27:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d18c3873-1804-3d55-b98a-312cc0480507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3e:c9:1a:63:1b:b5:a2:0e:e4:a1:a0:d8:3c:88:cc:e1:88:
         a3:de:cf:09:fe:82:e1:0e:63:8f:72:8b:77:86:a3:5c:76:04:
         f3:8b:64:8e:e5:5d:ec:83:1f:3a:5f:d6:a0:e3:9d:23:bd:d1:
         ff:9a:ff:7c:25:ba:bc:76:04:4f:3d:21:0d:56:d4:3b:5c:ec:
         19:45:cb:52:b0:e2:f5:cc:f0:29:c8:70:c1:65:03:15:c1:45:
         ec:d3:cd:5b:c8:79:db:37:a6:5b:b8:b3:4a:fb:4b:ea:ce:ab:
         f8:dc:86:d5:58:da:35:4d:2e:28:5e:9e:6b:74:91:88:f4:83:
         9e:e8:b7:55:90:b6:45:02:d7:39:4b:c9:e7:11:8b:f3:16:5d:
         7c:2a:a1:da:a9:44:00:4f:29:89:4a:83:6e:69:83:c0:5b:58:
         f4:d8:2f:f1:29:67:e1:34:86:60:83:cc:b0:a5:dc:49:91:75:
         43:fe:37:da:40:83:2e:42:2b:67:a1:a2:cf:e2:72:9c:65:7a:
         47:a8:f6:5e:db:27:5f:cf:90:47:3a:f2:af:b3:da:c4:d6:54:
         7f:db:f1:1b:56:75:66:e0:32:3e:f4:e5:08:51:2d:f4:1e:f8:
         9e:0a:a7:26:e0:8e:91:b5:03:4f:9b:a2:bc:e1:73:d7:ba:fc:
         54:f2:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:56 2025 by rpki-client