Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e46742ed-cf01-3681-bb22-94801f4c773c.roa
File:                     e46742ed-cf01-3681-bb22-94801f4c773c.roa (raw, json)
Hash identifier:          Rp2vWqZeWJ27UYl4BcNNNeJ1gEqKeXylaC8Csc06wW4=
Subject key identifier:   DA:0C:B7:9D:0A:3B:6C:64:84:AB:D8:D1:A3:34:AE:61:C6:10:31:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE461369C01AA29253840EE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e46742ed-cf01-3681-bb22-94801f4c773c.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     396578
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:36:9c:01:aa:29:25:38:40:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=f0aa8b89-32cf-4a79-a55f-2076271daeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:2b:d5:6f:b6:0b:b9:78:32:1a:d0:76:57:
                    ed:fe:0e:0c:99:7d:69:8b:89:f0:65:09:ed:2b:d5:
                    bc:ee:ab:e1:b1:43:51:72:7d:72:81:ce:f6:a8:53:
                    30:1d:6e:9b:e5:97:9a:d7:06:c2:2f:f8:bc:ea:51:
                    44:c3:21:27:18:4c:76:b9:e7:c7:9b:fa:4f:90:70:
                    3b:b4:c5:b1:e1:bb:59:ec:40:33:7d:f1:38:40:0e:
                    7f:d8:02:40:8b:5a:8c:59:fd:2b:a9:31:d7:90:97:
                    59:ad:42:9f:1c:f1:d0:8c:79:5f:de:26:90:8f:6e:
                    63:b0:c4:a5:f4:fb:89:a1:3d:c8:1c:b6:0b:8b:fc:
                    91:85:61:50:ff:b6:c9:06:67:59:65:62:a1:f9:25:
                    ae:ca:62:92:af:41:81:88:d0:0b:65:1c:dd:4d:a6:
                    23:df:23:92:dd:ff:6a:62:3e:0c:85:cf:0a:2a:8d:
                    28:ac:cb:79:8b:69:8b:8e:47:3b:f3:df:a5:0f:5d:
                    7f:2a:0b:5b:1b:79:1e:02:f3:66:2d:e5:d2:bc:09:
                    c9:78:61:ef:84:41:b4:bb:b9:46:05:01:10:55:f7:
                    91:22:a4:3c:d5:f9:99:51:51:40:f0:39:67:c2:80:
                    dc:55:0e:e5:49:82:f8:82:c5:7a:20:c2:bb:56:83:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:B7:9D:0A:3B:6C:64:84:AB:D8:D1:A3:34:AE:61:C6:10:31:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e46742ed-cf01-3681-bb22-94801f4c773c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:42:ff:50:0a:5c:1e:9a:23:dd:76:01:65:47:4d:af:9f:28:
         80:47:b3:a7:9c:be:f4:96:94:d2:17:eb:54:c2:27:ed:04:50:
         bf:7d:72:e8:52:a2:30:a6:f7:f8:f5:9f:d4:6e:36:c2:14:05:
         8c:23:c5:e7:1a:f4:35:48:d0:8d:3e:7d:f9:cc:73:09:f1:7a:
         eb:a8:eb:62:3e:8f:6d:a4:4b:a2:f8:ee:7b:7c:17:57:49:00:
         bd:d7:76:97:c8:94:b8:19:da:e4:46:b7:95:97:40:19:6a:ef:
         38:51:be:4b:8f:ba:fb:59:3d:fe:02:38:1d:2b:6a:1b:85:a7:
         ec:c0:78:b0:5b:94:2d:df:97:80:0b:8f:8b:53:07:cc:8b:88:
         ac:4c:fc:5b:7c:af:e7:2f:c8:e9:4f:80:ff:e1:af:20:1a:44:
         57:87:ad:c5:de:d1:a8:d6:1e:d5:e8:cd:68:63:8e:66:d3:e1:
         17:76:64:83:19:f1:38:79:ed:58:1e:05:b8:2a:b8:65:e0:ab:
         5f:27:39:95:63:0d:cf:32:f8:4f:47:be:01:0a:34:16:a7:0d:
         e8:07:0c:e2:5f:07:0e:20:d2:6f:b3:5c:14:c3:67:19:f8:58:
         30:c7:e0:6b:07:01:aa:fc:82:4e:ed:62:0e:f9:78:f2:b9:55:
         bb:87:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:34 2025 by rpki-client