Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa
File:                     8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa (raw, json)
Hash identifier:          bSERCHvsIK6d0A7xSook5BlWJ3QQBlUlDFB/OmiYjoE=
Subject key identifier:   3B:A5:EF:C7:9D:69:F8:46:D7:7D:D6:C0:29:F0:59:82:18:3B:A8:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9515D390FC07C203367E380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396592
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:5d:39:0f:c0:7c:20:33:67:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=323a7dc5-ec05-4de1-b4fc-a95d44dd0da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:61:f4:88:fe:ff:9d:2e:f0:b4:4c:13:b8:
                    5a:4a:77:b3:99:ca:3c:70:e6:e0:7a:bd:c2:d9:e0:
                    f0:c5:91:26:88:de:13:2c:99:24:33:6e:78:bb:a7:
                    08:ea:b4:10:b1:8a:2b:1e:9b:9c:6a:aa:fb:23:cd:
                    a9:29:f7:07:a2:f1:8f:67:df:3d:c0:8a:7c:4b:91:
                    43:92:59:28:9b:13:3d:ff:a6:d0:4f:fc:30:24:cc:
                    63:22:82:76:b5:cf:ec:f6:98:92:d1:cf:5a:e6:43:
                    4a:82:2f:03:76:36:68:0d:d2:d3:be:94:3e:c7:f7:
                    47:25:31:0c:54:28:94:5b:74:e4:32:7a:e5:3a:44:
                    5e:d4:32:76:8b:e4:e9:eb:e8:e8:1b:9b:a3:62:cf:
                    3b:78:58:21:d7:56:16:7f:43:dd:f7:6b:4f:95:29:
                    f7:47:0e:9b:8b:10:f1:b7:14:1e:36:0e:89:41:b7:
                    29:18:eb:68:f6:18:ff:e8:91:c5:bf:94:e1:d8:da:
                    f9:e1:dc:7f:c5:97:15:5b:b5:35:cf:5f:20:5f:5b:
                    b3:7c:1e:06:45:a9:e8:f1:0b:22:84:da:4b:43:cd:
                    8a:a6:cb:70:49:48:3a:76:d7:ad:36:af:3f:e3:0e:
                    45:1b:0d:11:bd:7a:ce:8c:49:18:2a:41:91:ce:41:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A5:EF:C7:9D:69:F8:46:D7:7D:D6:C0:29:F0:59:82:18:3B:A8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:62:11:d9:98:d1:38:33:12:f8:a0:1c:49:63:4a:2c:64:
         77:c6:9e:53:c4:d2:50:0a:8f:d8:4d:c5:42:8c:5c:07:80:1d:
         9f:3c:30:7b:d0:de:24:7e:a5:29:a0:53:16:1d:4f:6d:2c:a2:
         93:86:82:a6:8e:59:25:10:44:b1:3b:23:b3:00:67:34:20:3f:
         db:d9:04:84:64:2d:eb:38:c9:e4:d2:8b:a6:6e:ac:f8:3d:d4:
         a0:85:9e:0e:ba:a4:03:84:f4:a9:38:fd:a5:db:50:b1:45:b2:
         64:ca:64:56:db:94:a5:e3:c0:e6:4a:dc:71:52:1c:26:50:c1:
         ed:10:32:c8:e6:d8:87:5b:6e:1a:c8:78:4a:76:f6:aa:eb:f5:
         cc:63:8a:5a:30:ac:7d:14:05:38:64:51:e0:ee:0a:12:f8:e2:
         fa:65:11:ae:a5:eb:85:25:d0:f8:53:76:dc:77:ec:ed:d9:be:
         f1:8b:93:36:7d:c4:02:d6:46:1a:a0:02:e3:49:ac:95:a5:4b:
         33:7a:d3:9c:33:ec:21:dc:eb:df:68:dc:93:3b:a9:c1:aa:15:
         8c:ea:83:4f:39:0d:5f:16:5f:2c:2d:9b:4a:ff:93:9f:90:6d:
         31:57:9d:8c:0b:fc:8f:6c:e2:ea:e3:9b:77:54:1b:e3:64:2d:
         3a:6e:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:06 2025 by rpki-client