Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f90f2767-90b8-3275-aa9d-d685f2feb359.roa
File:                     f90f2767-90b8-3275-aa9d-d685f2feb359.roa (raw, json)
Hash identifier:          arxZK+LuYVhkfNcQnVuRCJDJ+W12atYJ2qhnPUIraF0=
Subject key identifier:   7D:D7:D6:B3:19:B3:6D:3C:90:2C:72:51:E6:19:F4:43:3B:AC:7D:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E6695277B3D441151900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f90f2767-90b8-3275-aa9d-d685f2feb359.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396584
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e6:69:52:77:b3:d4:41:15:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b4d4b675-c6bc-4ad4-a1cc-61c62f75f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:85:8a:6f:57:22:0c:b2:e2:22:6a:4e:49:
                    00:b2:94:69:ba:cf:57:fc:7d:c8:8c:d9:5d:1d:2c:
                    87:8e:3a:63:59:3b:12:21:51:dd:76:43:f3:a7:67:
                    77:b2:10:de:61:a8:8a:ab:49:4e:95:53:b3:61:9e:
                    a5:3f:60:72:fc:22:9c:4c:ce:d9:6e:12:0f:c0:e4:
                    ce:71:2b:50:a0:f1:88:ad:13:08:76:d4:a8:dd:69:
                    82:1c:e4:40:b4:5d:51:30:60:4e:4c:f3:8c:46:22:
                    11:92:ec:2a:54:9b:7c:70:71:fb:69:08:52:29:c2:
                    70:06:bc:a0:5f:74:94:b1:df:80:e5:71:79:42:de:
                    9a:6e:3c:84:52:e8:79:08:49:b8:5e:10:41:50:9a:
                    ce:b9:5a:5a:76:54:c2:e8:ea:04:7f:8f:78:6f:5c:
                    f3:86:17:96:82:9c:50:7a:76:e8:5f:5e:ff:94:0d:
                    fb:63:ab:41:be:ab:61:31:78:eb:7f:d4:9c:e0:87:
                    ef:05:ea:4b:5d:e1:b3:37:e2:1e:f8:ef:61:25:b4:
                    69:89:18:c2:36:56:41:61:83:8b:58:2f:c1:cf:70:
                    69:42:99:76:12:a3:86:c7:9c:0a:91:f4:1b:80:fd:
                    f3:c2:af:21:6e:9b:47:29:29:54:63:da:a7:23:df:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:D6:B3:19:B3:6D:3C:90:2C:72:51:E6:19:F4:43:3B:AC:7D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f90f2767-90b8-3275-aa9d-d685f2feb359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:55:19:aa:93:5e:bb:f0:58:bd:26:5d:25:4f:7f:82:0c:49:
         21:76:31:42:a0:21:fa:d2:b4:0d:46:39:dc:c9:b1:92:03:e6:
         4d:e6:38:29:7e:15:aa:0a:02:84:0f:4a:15:3d:9b:c1:e7:79:
         77:4b:0e:a8:96:db:43:39:f5:ce:66:2e:38:f2:3c:30:16:9d:
         82:81:e1:e0:ec:1e:67:0b:3f:57:6f:d1:8a:66:6d:b7:99:9c:
         eb:5e:71:45:0e:44:5b:15:52:a4:c9:7c:49:68:31:8a:7e:55:
         97:f6:65:71:b1:3a:db:57:dd:55:dd:72:7c:c1:2c:3e:00:fc:
         a8:54:58:88:df:52:30:df:a0:00:a1:74:a7:1b:4a:30:76:b8:
         74:82:a4:a5:7c:5d:39:f7:f0:65:21:60:e6:c9:db:43:e6:6c:
         7b:a8:a6:66:d2:b0:cd:9d:a3:8e:c4:a7:21:56:94:a1:e4:73:
         17:c5:91:98:c3:69:21:be:72:63:71:bf:fb:0f:a8:be:a6:70:
         05:7b:db:8d:47:38:72:8f:71:5d:05:4e:d0:c4:77:fd:59:42:
         3b:03:02:64:1d:1c:c5:53:4f:f2:35:4a:de:a4:17:e5:b3:f1:
         37:04:8e:01:5c:eb:6e:f8:45:b3:74:3c:55:2b:5a:97:39:3c:
         5b:aa:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:44 2025 by rpki-client