Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa
File:                     878b7987-5a90-3d1f-8353-c3365eaec1f5.roa (raw, json)
Hash identifier:          ZB1go+RVKkrJOb6Oqi221uaWAsG1mzE7G2tdfp3XtD0=
Subject key identifier:   09:58:49:57:F4:02:C4:10:24:F2:B5:15:F7:2F:CC:43:86:EB:E7:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9515E8E0AF17484E048B500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396593
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:5e:8e:0a:f1:74:84:e0:48:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=88f57231-0c5e-49d9-9e7b-1f9a37a1736e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:3e:38:f5:ad:99:a6:4c:29:1b:ea:7c:55:
                    9a:7b:84:95:fa:ce:10:3b:f5:9b:5b:31:08:c7:73:
                    64:14:6a:f4:2f:bf:bb:92:1d:e1:94:b4:c0:ab:1d:
                    55:3d:de:c7:37:12:e3:be:f2:4f:c5:0a:07:f0:28:
                    c0:32:bd:f3:73:e0:9f:ad:04:7a:4d:de:7a:84:db:
                    61:fb:df:3f:13:90:14:f2:73:67:54:96:c2:4c:d5:
                    b5:ea:91:ce:b5:c1:9a:c5:f6:43:ff:ae:71:9f:67:
                    e1:c5:68:18:9a:e6:e9:96:6b:0f:1e:a7:5a:a3:7e:
                    37:1c:d1:a1:da:c6:e9:be:7d:30:8a:0f:19:c0:80:
                    fc:f6:ec:8b:04:2a:07:c0:89:21:d7:ae:10:5e:5a:
                    d4:58:56:08:95:68:b5:9b:12:e2:19:7c:8e:26:c0:
                    bb:3b:ef:5b:4e:1d:9f:d8:e5:2d:7c:fb:c1:ce:cf:
                    a2:b0:2e:08:42:c7:df:7b:1c:85:66:c4:7b:dc:83:
                    7a:44:fe:70:11:08:70:b8:f0:d9:a3:4c:89:06:06:
                    62:8a:4d:9b:d7:60:ce:46:21:bd:2d:3e:c2:1c:65:
                    d5:ba:1e:8e:c4:f4:d0:fe:4e:57:f4:db:b0:6d:a6:
                    1f:20:dc:4b:17:1f:c1:f8:33:51:82:ff:a8:84:17:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:58:49:57:F4:02:C4:10:24:F2:B5:15:F7:2F:CC:43:86:EB:E7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:da:68:0f:63:f1:b0:ac:c2:cf:e5:4f:b9:fa:48:05:35:
         5d:3d:fd:d3:a2:65:f8:b2:b9:7e:21:4d:e5:25:09:ea:17:a1:
         ad:e5:0d:bc:f3:0d:e3:75:ca:f2:5a:7d:4d:4b:83:51:8e:ee:
         37:47:bd:cd:56:ec:97:38:4d:75:76:43:9a:5c:32:6e:f7:c0:
         08:e4:29:46:c5:df:a5:6c:56:5c:01:3b:bb:60:68:44:7b:fa:
         53:12:5f:03:50:8e:ad:b7:9a:24:3b:20:1d:d4:0c:ed:5f:9e:
         9f:73:ca:2a:65:9c:b2:d2:e8:9a:5a:ef:34:8e:20:39:29:89:
         fa:07:bc:d1:7b:10:8f:96:cc:b7:6b:9c:07:f1:df:a6:70:db:
         13:f4:d8:e3:49:31:e7:73:84:dc:8c:fe:ce:02:82:26:18:1e:
         2a:26:3c:c3:31:cc:e5:1c:cc:86:34:a5:64:60:4f:c2:16:80:
         ca:6a:0a:5d:d0:c8:f3:87:05:d2:38:72:1e:4e:89:db:d1:00:
         e2:da:4e:77:dc:d2:8d:92:bb:5d:98:f3:31:92:b6:a7:aa:20:
         ca:12:3e:d9:a6:a8:f9:cd:a2:3d:af:f2:48:2f:d5:55:0f:cd:
         ed:03:89:99:b7:1b:5a:b8:29:0e:79:29:8b:c2:45:e8:89:2c:
         ab:e6:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:36:11 2025 by rpki-client