Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa
File:                     f04fca5f-8ee0-3427-b56c-2094d28ded37.roa (raw, json)
Hash identifier:          A8tJ0DwT3i590o/jgxS6VLcIxx6jt5IGLojom9FImM8=
Subject key identifier:   B2:5F:C6:A1:01:B4:6C:19:31:88:A5:75:B3:BD:E2:15:A5:F7:9A:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E8ADE811B642D862F080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396608
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e8:ad:e8:11:b6:42:d8:62:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=597369a3-a7f5-4ee3-9198-61bdda31baaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:01:50:f3:85:09:b4:06:de:3f:3c:74:89:
                    78:23:3f:89:1c:9b:8a:45:bf:bd:4f:58:94:1c:a5:
                    ac:71:42:16:1d:bc:34:1e:e2:56:d3:18:61:7b:57:
                    36:c5:55:bf:47:c7:0c:d8:d2:43:9a:d5:cd:16:8f:
                    c0:22:f5:4c:34:b6:c2:d1:d1:b9:66:e1:34:a2:75:
                    4e:83:be:a2:72:b5:86:94:50:c0:74:c0:28:df:4d:
                    9a:32:2a:a0:11:90:8a:5f:be:be:fc:da:cf:46:01:
                    4c:e5:b9:42:fe:1c:b6:59:12:a1:da:ec:ed:58:46:
                    ee:fe:ac:b1:cc:7a:6e:46:7c:4d:ac:ae:bf:11:b7:
                    3e:e7:e6:dd:49:05:3b:b0:19:15:ef:38:1c:e0:41:
                    cf:bd:75:26:68:af:42:3f:c1:b0:fc:f2:7a:70:3d:
                    b6:22:39:af:fc:e0:63:e0:69:43:e0:27:3e:f9:b7:
                    39:32:62:13:37:6f:d5:bb:cf:30:5e:fd:cf:63:d3:
                    37:35:c5:14:ee:4f:42:16:1c:54:3d:a7:10:a5:a8:
                    e9:da:8c:8a:e6:a7:b7:79:77:9d:65:76:a8:15:52:
                    95:b5:20:19:3f:d1:16:ba:52:7b:9a:cd:cc:ac:e8:
                    d1:6f:1f:49:48:b3:66:8f:3a:e6:58:ed:b8:7a:f0:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:C6:A1:01:B4:6C:19:31:88:A5:75:B3:BD:E2:15:A5:F7:9A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:98:b5:e3:8f:0d:82:77:0f:f9:f6:46:23:4e:e4:ae:8b:24:
         ce:14:4f:44:a3:cd:0d:49:22:71:6f:79:9b:4c:c6:3c:00:eb:
         c5:8d:9a:0f:36:1d:09:e4:92:a4:0c:c6:e7:aa:b9:02:45:88:
         35:ae:99:0d:ba:ce:ff:50:45:85:1d:10:3e:a4:92:bc:13:6c:
         55:4c:cb:02:c6:cd:fe:29:b1:31:7e:87:4b:bb:ef:36:9d:48:
         39:15:4c:65:83:b9:0f:16:1d:22:55:02:d8:1b:ad:76:ac:12:
         57:19:fd:28:7f:53:e8:35:7b:24:2a:23:3b:4b:49:cc:5f:58:
         cd:19:ff:30:28:11:7b:3f:32:2e:79:a6:4e:77:0a:82:35:b5:
         75:bf:c7:34:95:b7:11:19:42:4d:a1:b2:84:2a:89:64:2e:97:
         1a:9b:55:e1:b0:32:1e:b4:fd:47:ef:07:b6:0a:06:fd:e0:8f:
         28:03:19:6d:6e:14:63:c1:63:12:5c:71:ac:e9:be:69:59:5e:
         50:aa:64:45:7a:72:50:c6:b1:5d:a4:e2:cc:fd:9d:04:9f:c8:
         b3:2c:a6:55:f2:5f:72:39:e7:32:68:e9:a1:2e:de:da:db:45:
         6c:c0:0d:05:bc:03:61:63:64:de:58:d7:e2:a4:82:ce:6c:82:
         b9:d1:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:39 2025 by rpki-client