Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00b4eb2-4644-382d-86ee-9f1d177c9db6.roa
File:                     f00b4eb2-4644-382d-86ee-9f1d177c9db6.roa (raw, json)
Hash identifier:          e7GzEsYNR71UOj2AQ6ioznhCiuS3tLJyMsnlbzpkmis=
Subject key identifier:   2C:88:6F:0C:47:C6:EE:07:15:A2:70:46:B8:5D:8F:88:B8:D4:F3:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE46137A4030C079135D52C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00b4eb2-4644-382d-86ee-9f1d177c9db6.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     396561
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:37:a4:03:0c:07:91:35:d5:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=5a21ec89-3b70-4a94-af38-8f7413a78d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:74:fe:db:24:fb:67:12:9d:c0:c2:2f:9b:
                    13:4e:78:03:b5:5e:33:af:da:57:d9:79:17:62:92:
                    5a:d6:73:8e:5c:b6:5e:0f:3e:11:ec:55:8d:e0:2c:
                    56:ba:6c:57:b9:bd:5f:8e:92:2d:1d:83:5b:97:2f:
                    ed:b2:00:fb:d2:45:03:80:d4:05:c0:01:c3:99:44:
                    09:d0:df:eb:5f:0a:0d:69:ee:67:e7:54:2e:b1:98:
                    8f:4b:a2:ad:49:f0:07:a6:f6:74:31:e1:cf:f3:01:
                    c6:f1:61:1a:3c:05:4e:f1:7a:fb:32:31:a2:04:25:
                    eb:47:a3:41:75:2e:1b:f1:d5:d5:34:0e:e0:0b:32:
                    b3:59:37:db:46:90:ac:4a:07:51:33:ff:95:0b:8b:
                    42:ec:bb:45:06:46:d0:74:34:34:12:7a:bc:c4:05:
                    a3:66:65:98:a3:ed:52:0f:5f:aa:43:62:43:e4:5c:
                    a4:bb:33:81:c3:65:80:a6:6e:11:58:a6:36:d6:81:
                    d5:f9:91:f0:06:fa:bb:a8:09:df:24:ee:33:2e:13:
                    3f:3f:73:e0:f6:6a:10:21:40:6e:6c:f3:37:a2:5a:
                    43:ac:1b:21:93:dc:1a:54:f8:9b:92:e1:77:20:38:
                    6a:1d:7e:ff:21:db:79:2f:1d:6c:e9:f9:c4:27:d8:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:6F:0C:47:C6:EE:07:15:A2:70:46:B8:5D:8F:88:B8:D4:F3:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00b4eb2-4644-382d-86ee-9f1d177c9db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:70:65:02:2a:8f:41:55:e0:fa:b1:11:49:95:27:eb:b2:bf:
         62:11:4d:19:e5:46:cb:bf:7e:78:8c:b0:fb:08:71:27:c9:40:
         22:93:8c:c3:93:49:e9:7e:b4:ec:d6:d1:98:aa:a3:1b:34:4e:
         3c:6f:c8:b0:23:ac:9e:2b:8a:0f:dc:16:12:b8:b1:26:f9:6e:
         3b:c5:cc:cb:b1:0f:5a:c0:99:c4:58:40:33:07:23:df:11:97:
         0a:4b:49:9a:87:0b:89:ba:4d:8b:17:cc:61:82:0f:62:9c:fc:
         d2:6a:1d:77:7c:0c:fd:ab:c6:20:3f:8a:c4:b2:e7:3c:1f:67:
         eb:0d:33:bb:c0:be:15:16:d3:2c:b0:25:73:f0:7d:b6:2e:a4:
         5c:8e:a3:8b:a2:e2:04:2b:02:91:6d:f7:e8:38:e1:8d:cf:28:
         22:b3:37:cb:63:a9:5f:15:6f:70:76:0c:ca:91:5f:1e:0b:6f:
         ff:51:6c:78:a0:4d:bd:d3:61:5e:6a:1b:a1:d9:95:72:e4:a1:
         86:02:ff:f9:c0:dc:54:48:64:3a:2a:47:5e:e2:67:ed:bf:cd:
         48:0f:ad:c3:e1:9e:ef:16:52:9c:00:c7:96:7b:c8:96:d6:56:
         4c:0b:b0:8e:30:ef:c5:16:43:2a:ec:09:0d:8d:77:9d:71:d7:
         7f:88:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:14 2025 by rpki-client