Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa
File:                     fb3065f8-1ec2-3da4-b372-22da53e557ab.roa (raw, json)
Hash identifier:          jSn3+7JSsV/4zigi8YVt1eyPtYHU/kUGI9ql/HVLyjs=
Subject key identifier:   BC:7F:41:3A:2D:F4:32:6A:3D:85:9D:34:8A:A1:76:3F:EF:A8:70:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE19704749DA2EAAAC4D68E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396577
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:04:74:9d:a2:ea:aa:c4:d6:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ad22d894-7c9a-4c4e-8b17-ff040af296a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:0f:04:01:8b:35:0d:10:eb:c3:9e:1c:58:
                    92:b8:e0:88:76:16:e4:2f:36:bb:10:da:08:51:99:
                    70:49:d3:7e:6e:67:d5:a6:e9:bf:08:24:74:98:ab:
                    9c:bb:b1:ff:c6:6e:c1:69:de:fe:75:e6:23:96:07:
                    e2:37:b9:54:e5:61:8f:0e:4b:fc:32:7e:d9:ac:a1:
                    5e:a6:5c:d1:86:d9:26:bc:b6:83:32:e0:88:fa:c6:
                    7e:aa:ed:8e:30:9a:82:e8:bc:e8:d8:20:a9:17:6e:
                    56:13:f5:97:32:6f:37:7e:95:2c:a6:1e:5c:3b:64:
                    c1:bb:f1:95:62:9c:d6:57:61:b8:64:d6:a6:c8:9c:
                    a5:a4:fd:a6:55:09:ef:34:11:17:46:80:22:7e:58:
                    54:bb:13:fc:a2:9b:bd:0b:86:18:93:e7:38:99:f5:
                    69:52:a6:25:97:92:3e:ea:b8:28:50:b6:ec:b4:8e:
                    55:9a:6f:76:7a:45:57:8c:db:be:1e:2b:0b:c1:10:
                    0e:29:4e:89:e0:cf:cd:57:28:ad:a7:4c:f7:d1:91:
                    e2:91:3b:b9:cc:d0:8e:9d:2c:fb:b8:74:ea:a7:66:
                    dd:b8:2d:11:a7:71:14:bd:4a:48:c7:05:0f:6b:d9:
                    a6:e0:a4:80:98:12:1a:ec:c5:b6:39:9a:82:34:4c:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:41:3A:2D:F4:32:6A:3D:85:9D:34:8A:A1:76:3F:EF:A8:70:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:15:23:c9:56:92:09:3a:33:68:bc:dd:ba:ad:eb:79:c4:85:
         06:db:e5:5a:27:72:89:dd:02:ce:6c:75:3d:65:98:88:f7:a9:
         af:5c:ae:ec:94:1c:b0:85:4d:df:1c:21:99:43:5e:aa:0e:8e:
         74:fd:44:30:bd:56:15:9c:e0:8c:43:28:5c:b5:be:64:fc:29:
         e4:e7:de:ff:cf:d2:54:68:15:40:40:65:17:e8:49:97:fc:52:
         c7:c5:06:63:87:63:63:fe:77:34:59:43:d9:67:88:4b:f0:e1:
         0e:ef:57:f3:d8:80:0d:5b:d6:fa:db:b3:b1:d0:28:49:68:d3:
         aa:a2:23:10:81:59:7a:83:89:0d:d0:3b:31:da:66:3a:29:b3:
         68:be:15:fc:a2:53:24:ef:a8:34:6a:ab:99:15:eb:db:e5:14:
         09:1c:a1:77:93:9d:45:87:b2:c7:09:4c:2d:ba:12:93:0c:33:
         09:ad:2a:2a:f1:b2:3e:37:2a:78:2b:6c:68:f4:f9:e3:4d:7a:
         7c:e9:63:31:2f:fb:f9:ff:1d:c1:31:8b:b5:4c:91:25:94:76:
         f2:64:7e:89:e7:15:b0:34:a7:28:93:89:30:af:8e:3b:c6:c9:
         6e:2f:ff:96:43:f8:a1:32:85:24:a5:65:79:98:03:0b:3a:f4:
         75:c3:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:44 2025 by rpki-client