Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa
File:                     5196fc80-e236-3063-93b6-611395e8e648.roa (raw, json)
Hash identifier:          3M6NMS+PD9JKRSNmqLYM690dvrZQuvtTHfEpSAgWt7k=
Subject key identifier:   83:A4:79:36:C8:7C:4B:72:A2:A0:85:37:22:D5:F2:61:E3:4D:78:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF95164ABA7C97F65A6553380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396573
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:64:ab:a7:c9:7f:65:a6:55:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=7998492e-aa6f-4830-ad3e-470b1be705c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:8b:56:43:bf:d1:03:07:80:b0:46:9c:23:
                    13:7e:fb:0a:33:73:09:f8:4d:88:8b:e9:e2:b3:0d:
                    c3:0f:8c:76:44:4e:b0:5b:48:85:d7:43:90:17:06:
                    48:49:90:8d:e8:5e:db:05:17:98:e7:62:35:95:bf:
                    35:f7:e1:83:c0:ea:0e:12:1d:20:08:cd:1b:77:c5:
                    55:bd:c3:f3:5b:5d:6c:07:20:43:1b:4b:48:b4:e3:
                    16:de:d1:ad:b5:04:56:de:ff:ae:07:05:49:2a:86:
                    b0:db:d9:1f:52:e7:b6:89:ba:af:ed:c4:79:8c:cf:
                    11:63:ba:ca:1e:d9:a4:f7:6f:45:48:56:0c:71:88:
                    c3:63:c9:0d:a4:70:eb:c8:19:dc:ec:a1:dc:a3:d1:
                    a7:be:01:24:a4:2b:59:59:98:51:f1:b0:5a:58:97:
                    07:64:fc:ee:dc:b7:7e:da:7d:43:b2:1e:97:33:e6:
                    e2:61:6f:d1:84:9e:c7:5d:7a:43:49:bd:8d:08:c9:
                    97:54:c1:53:2b:30:bb:35:08:7c:ba:f0:ae:48:02:
                    28:0d:d5:a6:92:13:8b:8f:c0:b5:86:2a:ef:f3:99:
                    20:63:c4:36:89:bd:29:25:04:e3:2f:f4:0b:4a:f8:
                    02:dd:36:23:62:9b:dd:8c:2d:f7:d3:ec:c8:42:44:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A4:79:36:C8:7C:4B:72:A2:A0:85:37:22:D5:F2:61:E3:4D:78:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:bc:ed:2a:46:5e:8e:d0:6d:5e:13:b0:c6:db:b2:04:c9:
         3b:4f:f5:c6:55:61:a1:0d:f1:9a:57:71:3e:b0:4c:4f:16:c5:
         09:5c:94:3a:87:63:d3:58:a3:ed:52:7c:5e:47:10:a7:84:a5:
         b3:6b:2e:74:f2:33:86:1c:62:0d:a9:e6:66:f2:f4:5c:bf:04:
         b4:74:64:29:ea:5a:f4:a6:5c:12:ff:61:be:84:40:3b:bb:3b:
         0f:00:0a:93:b3:66:e8:5c:58:ca:3a:19:58:96:96:e8:5f:e8:
         15:84:8e:54:1a:7e:b6:d7:e0:cd:d8:76:56:60:86:eb:bf:74:
         7e:83:4f:04:73:b6:7e:87:9a:e3:62:41:32:1e:b0:85:19:d1:
         4c:a4:ee:68:7a:9e:d1:06:2d:40:67:c8:7e:da:ce:45:95:48:
         22:2e:4d:d4:8b:34:25:11:e0:cf:fd:ca:9a:e6:ce:04:ac:18:
         90:18:f6:7c:0d:c4:43:9e:16:64:13:37:dd:15:6e:bb:6c:9b:
         cf:c8:82:af:77:2e:c0:30:00:e0:d6:e5:71:ad:dd:4a:26:4d:
         93:0a:2d:af:3d:f2:42:aa:04:46:75:55:3f:d9:d2:91:01:a3:
         a6:b5:9a:41:08:f3:93:04:c4:83:7d:44:82:8d:88:78:fa:e9:
         ab:29:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:51:58 2025 by rpki-client