Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93463211-6c79-36bc-a429-32edab4d3d94.roa
File:                     93463211-6c79-36bc-a429-32edab4d3d94.roa (raw, json)
Hash identifier:          UkPHEROI3E8iezOhHU+BqaA5Xj5TPbH/KrQJ6qrvFm4=
Subject key identifier:   D4:A8:51:B8:92:2B:AB:DE:8B:3F:67:E8:7A:B7:41:3D:06:48:7C:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2D4BB428EB5CF4993300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93463211-6c79-36bc-a429-32edab4d3d94.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396826
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2d:4b:b4:28:eb:5c:f4:99:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=8a47930d-2d93-4c4d-a900-f133bb7891bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:22:4b:1b:b0:62:ea:b2:b8:a5:ca:ad:05:
                    19:02:51:b4:0b:90:7e:7d:ab:a6:1e:d6:d6:eb:f0:
                    cb:53:84:c4:ab:9c:4a:7c:a1:f1:cc:0e:cc:bc:c8:
                    65:37:c1:1d:0c:9b:a3:86:c3:4f:9b:66:b5:fd:22:
                    c2:47:74:e1:0c:a3:42:94:80:be:81:3e:ef:87:7c:
                    17:23:53:86:8d:f4:cb:d4:b0:c7:43:7d:48:20:b6:
                    99:c5:2b:cb:85:9e:19:1d:83:5b:0a:4f:d4:d5:18:
                    43:3a:05:d7:a5:f0:1c:20:c9:1f:9e:6c:f4:72:bf:
                    9a:ed:7f:b5:56:d3:56:af:d6:c2:36:b7:e3:dd:89:
                    f5:ca:bb:ef:71:38:76:00:9c:59:fe:45:51:4a:5d:
                    62:11:d1:a5:6a:77:ab:26:bd:49:41:2d:0b:34:ed:
                    f5:0a:9b:e1:cb:3b:43:46:be:00:8b:8f:3e:6a:b5:
                    be:f2:d9:e6:a6:56:1c:7e:69:8a:da:70:06:ee:de:
                    bd:e9:9a:ef:18:ac:3e:2c:df:c7:8c:06:74:e0:23:
                    af:a1:a6:ae:37:7c:34:fd:a7:39:b5:e5:b5:c7:db:
                    25:41:ba:9b:65:4d:6b:53:a7:95:f0:c9:a8:9f:2e:
                    ab:78:d1:19:f5:c8:de:87:d5:05:03:12:85:91:e0:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:51:B8:92:2B:AB:DE:8B:3F:67:E8:7A:B7:41:3D:06:48:7C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93463211-6c79-36bc-a429-32edab4d3d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:29:5e:44:c3:7d:43:e5:2b:14:c1:d3:be:b1:7d:cb:4d:
         dd:7f:09:d2:83:aa:26:79:49:58:e7:bb:d0:89:40:4d:50:21:
         62:45:06:ff:cc:32:37:a8:28:7f:36:1d:b0:c3:60:8d:a8:ec:
         7d:ab:7f:d8:cb:b4:f0:14:d3:02:fd:9b:5b:01:72:f3:d4:55:
         3e:6e:b5:e6:27:d8:dc:a4:7d:13:50:d2:f6:ba:97:ba:bb:ea:
         b5:57:76:5d:44:57:b4:26:fd:7e:f1:52:0a:5b:57:1f:9a:b1:
         36:e5:f4:fb:ed:37:98:cd:72:c3:4e:53:1b:d3:14:f4:3a:80:
         e2:49:c1:25:61:d0:74:52:bc:d2:ea:c2:23:ef:91:e2:bb:24:
         9c:95:75:4a:3f:bc:36:81:97:a9:14:09:a8:08:69:90:d3:16:
         d2:d9:6e:71:ed:4d:bc:0c:b0:b0:cb:e9:ff:12:61:46:91:bf:
         95:5d:17:45:c6:14:f9:40:f1:e6:d4:09:a5:d9:31:68:34:99:
         8c:06:80:b6:84:9b:27:95:ff:71:ab:22:8c:03:de:cb:89:05:
         02:af:de:04:aa:b5:2a:22:69:16:a1:a8:06:7a:d2:e4:c3:1d:
         91:77:93:99:a1:c5:06:e4:e0:f8:4a:5f:b1:4a:23:cb:34:fc:
         14:5c:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:54:14 2025 by rpki-client