Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809e226c-fa24-30c8-b601-f4acff44b68d.roa
File:                     809e226c-fa24-30c8-b601-f4acff44b68d.roa (raw, json)
Hash identifier:          rlsxP9ko60KGlasvXYoGRcBoorxLhF2lNjk3ArMdwCk=
Subject key identifier:   59:46:F8:21:F0:F4:80:ED:71:99:10:96:67:89:73:47:05:5F:07:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF951603EA071B015EE0ABB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809e226c-fa24-30c8-b601-f4acff44b68d.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396586
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:60:3e:a0:71:b0:15:ee:0a:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=25b1a884-67f7-46e5-afb9-9a25a8b13f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:db:dd:04:13:b6:2b:11:55:39:ad:3a:9f:
                    30:c5:c8:ba:0f:f4:6b:9c:85:b6:44:81:95:8d:cf:
                    54:11:1d:e5:49:2e:1a:b5:77:70:5d:10:ed:08:ab:
                    11:b3:67:4f:d8:19:8d:c2:10:5b:01:ed:92:81:bc:
                    f1:47:02:ec:81:c0:7d:58:da:88:6e:d3:dd:a2:a2:
                    ac:14:05:b5:03:72:00:85:62:8b:ed:d8:d6:56:4f:
                    7a:23:bc:4b:84:f1:4a:35:de:24:5a:17:1b:1c:65:
                    8b:e5:0a:bf:c9:1d:3d:4d:08:17:50:b5:9a:16:94:
                    cd:af:6b:9c:73:34:05:48:97:39:03:e4:94:b3:ff:
                    1d:9a:6d:d9:6d:a3:fa:22:d2:31:c5:4f:82:c4:e4:
                    2e:40:c0:fa:ef:ca:df:9c:13:09:f1:a8:a7:05:1e:
                    61:2f:87:10:f0:06:0d:7e:ff:b0:1c:6a:98:d5:68:
                    15:81:ea:12:cc:1c:0b:b2:c0:de:5c:b9:43:c9:b0:
                    ea:e1:10:00:49:d6:d0:68:69:dc:9e:64:c6:8a:bf:
                    76:9a:85:bf:99:c5:7c:fd:28:14:a6:68:49:21:83:
                    d8:03:57:1c:45:cc:2d:75:d2:b3:03:cb:23:6f:46:
                    c6:99:5d:b2:03:64:9e:08:39:a9:15:61:72:45:32:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:F8:21:F0:F4:80:ED:71:99:10:96:67:89:73:47:05:5F:07:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809e226c-fa24-30c8-b601-f4acff44b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8f:bd:f8:8d:29:72:78:52:f4:e6:b6:af:b9:f5:bf:fb:c9:
         5b:09:3a:47:b0:9b:74:e2:49:31:6a:6b:1c:bc:2b:c5:a0:6a:
         11:dc:69:03:81:37:a3:d8:11:8d:e1:c1:9a:e8:7b:37:5c:8f:
         40:da:1f:d5:e2:7f:43:7c:28:7b:87:91:37:ee:0b:67:93:31:
         80:a4:64:6d:a4:55:39:f1:ac:80:3a:74:23:94:57:06:94:2d:
         85:64:94:16:d3:3a:1b:63:68:e6:b7:af:24:d8:95:52:3b:49:
         cf:f3:87:e1:80:ee:7f:d9:33:3c:71:2a:4f:ce:d1:0b:ae:9d:
         7a:13:5b:50:73:cb:72:95:dc:91:98:14:c5:2d:5a:ab:e9:ef:
         14:8e:83:29:b7:5a:aa:40:94:01:34:47:80:3f:3e:de:26:d3:
         27:87:ca:9d:56:75:3e:87:bb:ea:33:03:11:59:37:48:36:34:
         c0:49:26:c9:ce:d8:96:df:90:88:19:c6:3f:07:89:a5:b5:9e:
         fc:61:73:b8:2c:53:31:c9:29:de:70:da:c7:23:06:0b:6b:b8:
         6e:0a:73:68:d4:04:c6:0b:a9:c0:c6:94:5a:79:12:54:c3:63:
         41:e2:8c:fb:89:0c:c8:28:c3:b3:31:ea:ac:49:18:d5:76:f1:
         d8:04:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:49:22 2025 by rpki-client