Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67110c05-60b8-3b30-b834-9c25d738bbf2.roa
File:                     67110c05-60b8-3b30-b834-9c25d738bbf2.roa (raw, json)
Hash identifier:          bkwzHh1cvVBmwl6wIk3+09mIbzXZycF7PW6Pl3THjbA=
Subject key identifier:   D5:B0:E6:62:15:CB:33:91:3C:B0:BC:33:67:E9:72:46:81:E8:06:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9515FA4AF2EC150B44BD400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67110c05-60b8-3b30-b834-9c25d738bbf2.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396616
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:5f:a4:af:2e:c1:50:b4:4b:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=95ad5b3a-1969-4396-96d9-964b02504cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:13:ba:5e:64:d0:a2:87:bd:ea:e3:41:c1:c5:
                    67:e2:a4:0d:30:52:95:dd:b3:4a:a4:9c:6c:b1:ac:
                    77:01:23:26:fa:59:20:16:f1:0d:01:60:da:f4:e0:
                    29:72:7f:fd:b3:78:19:45:78:0d:39:68:f2:eb:87:
                    b2:b7:b8:db:d5:b5:69:1a:80:58:f5:1b:84:73:2f:
                    80:55:53:01:7e:3c:7e:82:bf:39:dd:54:67:5b:be:
                    70:b6:24:98:16:ed:99:8a:58:6a:7f:32:93:d5:79:
                    ee:bf:9f:2d:6d:de:78:45:b9:78:cb:98:02:3f:7b:
                    16:db:df:ac:bc:81:13:ce:4b:4e:55:2e:78:3c:18:
                    44:46:cb:98:50:a8:ee:8b:4d:2f:6b:68:0a:e2:d5:
                    a8:81:04:b0:f3:e2:35:36:2b:a9:93:3e:0a:31:7e:
                    51:ba:6e:59:03:a6:21:5b:db:4c:6d:81:7e:b3:b6:
                    a0:b6:18:bb:a0:45:99:4e:c1:d7:f7:21:d2:41:98:
                    ae:9e:50:10:95:b2:90:e7:aa:75:f1:81:10:82:4f:
                    5e:bf:1f:44:62:07:61:86:96:45:3a:1d:6d:52:7c:
                    88:a7:b3:21:79:08:aa:00:1a:e4:e0:04:24:b6:16:
                    e4:6e:b7:18:fb:f2:b1:fe:f0:99:58:a9:c2:61:03:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B0:E6:62:15:CB:33:91:3C:B0:BC:33:67:E9:72:46:81:E8:06:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67110c05-60b8-3b30-b834-9c25d738bbf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:20:f0:05:00:eb:07:fa:38:89:fe:10:c8:ab:83:d4:2c:4e:
         9e:46:71:ff:09:ab:2d:fe:50:f0:a9:35:b3:ca:0d:99:b5:10:
         dd:45:30:bb:84:47:d3:3c:5f:db:6e:64:2e:9e:76:a2:89:5c:
         00:b9:3e:b6:6e:33:53:ee:f0:de:53:f5:46:ec:73:8f:49:af:
         5e:67:5b:cd:28:61:01:e4:4a:74:78:b9:4a:01:d9:3c:12:17:
         8d:ab:aa:8c:60:62:8d:f2:e6:ab:cf:78:5f:dd:e8:2d:10:70:
         6a:18:df:9f:13:38:8b:22:cc:4f:68:2d:4c:a8:db:de:ab:7c:
         2c:f4:13:5f:a4:79:dc:fb:e3:2f:0c:49:71:fe:40:30:28:e6:
         81:3f:1f:95:4f:fd:ed:0b:15:d6:fe:a9:27:58:be:52:34:9b:
         18:c2:60:70:7d:b0:62:a0:40:b6:3e:e1:0e:78:35:78:f8:99:
         31:50:8e:c1:1f:a9:8d:64:34:e5:17:2b:69:eb:d6:ac:87:4f:
         a3:76:60:e8:f9:23:b6:e1:0c:7f:8c:33:04:ad:75:66:e6:40:
         23:11:76:6f:2f:83:c4:f2:04:48:65:2a:75:74:9c:e9:25:7d:
         31:46:6b:c0:52:03:cd:8c:e5:0d:ce:11:84:0b:0a:64:ce:44:
         2c:49:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:40 2025 by rpki-client