Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecc1f154-3d7d-33f3-aece-1b737628b79a.roa
File:                     ecc1f154-3d7d-33f3-aece-1b737628b79a.roa (raw, json)
Hash identifier:          HM8HZkYMolb49hDWrs0U4E/3TxP0mOiEsBs7YIaamX0=
Subject key identifier:   0A:AC:54:7C:4A:3D:41:42:C8:A1:4A:9C:76:E9:DC:7D:C0:04:41:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF715B1069C7B14E3B4FCF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecc1f154-3d7d-33f3-aece-1b737628b79a.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     397195
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:15:b1:06:9c:7b:14:e3:b4:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=26a25ae1-4eda-4e6e-b9c8-cda00aae1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:84:0d:ac:4e:94:c9:51:37:aa:4e:a9:10:
                    f1:6c:fb:9f:41:f2:61:7f:ba:d0:1e:6d:17:55:11:
                    3a:2b:7d:67:01:26:99:7b:d7:55:79:cf:a1:78:f9:
                    57:0d:f2:bc:ef:d9:c6:d2:ad:d1:9a:45:cb:8a:64:
                    66:32:43:a5:eb:b0:26:0b:cd:36:e6:0b:1d:30:90:
                    8c:c6:6e:63:bf:e4:22:45:4f:ba:ee:81:56:55:6b:
                    6e:59:8f:49:32:2f:f7:13:c4:02:38:ad:94:38:24:
                    aa:07:5d:f6:af:95:30:11:0b:30:d7:c0:a0:19:e3:
                    8a:70:d7:60:5e:dc:0d:56:15:25:7d:0f:43:a2:38:
                    c3:fd:1c:0f:d9:4f:bb:97:05:1d:db:30:5c:23:17:
                    34:b8:48:e2:b6:7d:30:21:85:cb:4a:87:28:57:ad:
                    79:76:41:19:35:ba:46:f1:ba:b2:bc:06:78:37:ff:
                    6b:be:91:3c:cb:55:60:bf:d4:f4:a9:a6:a2:97:a8:
                    a6:74:83:21:46:99:8a:0c:6a:93:fb:ea:77:c8:3a:
                    51:bb:01:a0:bf:ed:c4:db:5a:32:da:7d:5e:20:56:
                    78:6c:5b:16:62:5a:72:71:f0:30:b1:5e:d9:58:5b:
                    8e:0d:09:25:45:a2:03:3c:98:d6:91:00:ef:c0:75:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AC:54:7C:4A:3D:41:42:C8:A1:4A:9C:76:E9:DC:7D:C0:04:41:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecc1f154-3d7d-33f3-aece-1b737628b79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:20:aa:9a:d3:d0:0a:f9:6a:2d:84:8a:7a:35:85:a6:b5:0b:
         74:ec:f0:12:f4:72:bf:79:84:cd:28:be:4c:68:e1:eb:1b:9b:
         89:a0:76:1d:59:f6:ca:8e:f1:71:68:ed:8a:33:51:6e:26:d5:
         4d:70:95:93:f7:c3:55:5c:7a:3f:5b:b0:33:fd:15:05:21:26:
         2a:a6:29:ae:e4:6f:7a:7b:2a:0e:e6:65:84:e8:df:89:e7:61:
         d0:bd:4d:34:0e:e9:ad:c9:37:0c:a2:ec:fc:f4:4e:5d:be:01:
         b1:be:30:88:72:ef:6e:cb:e2:cd:f8:d9:2a:a2:c7:fb:f5:3b:
         bb:8f:e1:2d:d3:a8:b3:9f:9e:3d:f0:3c:0d:f4:cd:57:69:af:
         e2:ae:6e:37:1c:0c:d1:2e:3a:68:d2:90:18:9a:3e:de:b4:cc:
         37:fa:0e:e3:d4:c3:f2:be:60:dc:4b:e0:c3:48:9c:f7:52:73:
         f5:fa:6e:1e:92:b5:fd:3f:cd:c0:ec:25:11:e7:9d:7c:0b:d8:
         4e:fb:2d:47:e0:15:9f:09:57:8b:2c:09:cb:69:c3:01:3a:25:
         ed:51:c2:74:81:1b:1b:78:b3:62:5c:e3:16:c9:48:3e:cc:9c:
         7e:54:d7:ca:1e:dc:98:b0:0c:ff:c3:ad:af:ce:e9:92:e5:93:
         82:c9:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:45 2025 by rpki-client