Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407fd8ed-6c14-344e-8231-1ed196d24d33.roa
File:                     407fd8ed-6c14-344e-8231-1ed196d24d33.roa (raw, json)
Hash identifier:          JFdoXBOI5/pHuP40rSw9Qf4EWNV/9Ed/XJ9pNsBZaMY=
Subject key identifier:   60:03:27:5B:87:F1:28:EF:74:1E:88:FF:77:20:0E:C9:5D:08:85:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C275E577BC12EE140A370
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407fd8ed-6c14-344e-8231-1ed196d24d33.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396551
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:27:5e:57:7b:c1:2e:e1:40:a3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=1fa9faf0-b385-45d5-aa1d-b22ed33be4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:70:ca:b6:83:ed:36:6b:7e:43:c0:60:95:
                    39:ff:b1:c5:d2:c7:3c:d4:f2:4c:fe:e9:94:5a:75:
                    32:2b:6a:db:09:80:b1:08:06:df:66:48:3b:f6:20:
                    14:f4:85:cd:0f:61:1e:67:db:e4:d7:24:f6:e8:ce:
                    8b:6a:6a:f8:92:f0:d8:04:ad:84:9d:cd:d8:76:32:
                    b1:a1:d6:22:bf:90:0f:a1:cf:d6:fa:be:cc:f4:a0:
                    1d:53:f2:11:9e:56:1a:00:3c:1c:57:20:49:7a:5f:
                    0d:ec:4f:98:29:ef:20:d0:48:57:78:e3:2a:4b:54:
                    12:c0:ee:e6:29:0a:0d:9a:c3:33:14:87:0d:a8:5f:
                    32:80:bb:90:f6:4a:29:45:96:fe:28:43:6f:60:99:
                    82:b9:01:28:02:dd:ee:87:14:ea:45:91:e4:2b:c9:
                    d0:6d:5e:86:e6:b5:c5:d2:c3:8c:f3:64:24:9f:ba:
                    50:df:7e:c1:db:e6:4b:d5:95:57:1a:c5:2c:7c:12:
                    9f:d6:e9:28:4c:28:98:cc:e2:2b:f8:0f:af:f9:98:
                    8e:95:54:62:7e:7c:01:66:44:1a:1e:54:18:bc:67:
                    9d:30:69:59:ea:32:18:23:1d:ff:c8:15:91:cc:63:
                    16:40:50:9d:7c:b7:c2:a9:81:0b:6e:4f:9a:5f:c7:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:03:27:5B:87:F1:28:EF:74:1E:88:FF:77:20:0E:C9:5D:08:85:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407fd8ed-6c14-344e-8231-1ed196d24d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:dc:00:40:08:79:fd:52:ad:79:91:11:53:9e:fe:39:ac:
         8d:5d:c9:51:f2:16:fc:ec:62:ef:ca:5d:ed:78:b7:0f:7c:e8:
         f2:8b:86:34:85:3b:a0:7b:af:6c:49:f2:83:b1:f8:b0:75:2f:
         8b:eb:a4:81:90:ef:2a:66:87:bc:36:b8:dd:29:10:1c:05:5b:
         78:0b:4f:5d:76:df:4c:ff:bd:b8:bd:ee:92:c5:04:51:9b:10:
         0c:bf:1c:06:9b:ca:e4:cd:7f:8c:20:a9:3b:40:94:68:73:37:
         5a:61:79:51:5e:8b:ed:c9:28:80:26:db:ce:62:54:c6:3b:52:
         ff:36:0a:90:d3:14:f9:69:f0:27:c3:45:fd:29:15:dc:06:50:
         79:17:d8:8f:9c:c3:48:78:c6:94:d1:30:cb:8f:83:06:09:11:
         ee:7b:66:38:b0:c2:bf:20:f7:f0:7a:bd:51:fd:e2:d3:6b:06:
         6c:1d:c0:88:12:3b:f1:93:45:01:4f:a0:df:13:00:76:90:11:
         13:7b:d4:7f:9b:32:40:7a:10:a1:5d:41:0a:e4:ba:9d:36:88:
         0b:e3:8b:3d:90:ad:2b:94:4d:5c:90:4a:0a:86:c1:dc:bc:d4:
         12:94:62:4e:95:10:5a:9f:b4:45:6c:37:6d:18:d4:05:89:0c:
         35:f7:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:46 2025 by rpki-client