Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa
File:                     ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa (raw, json)
Hash identifier:          JT4dE9O1mC+fx4WgetJpg7OPoGhMFNAamCRgS4vXfBA=
Subject key identifier:   85:D0:19:50:7E:00:47:5F:DE:DE:81:11:37:61:A8:1A:D4:F5:81:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2AB912D3802428A51880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396827
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2a:b9:12:d3:80:24:28:a5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=4070cd36-a38e-4f60-bc02-d7b449816743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:47:69:1c:88:95:17:91:db:c7:ae:cf:18:
                    b9:24:74:87:32:e8:26:e3:36:1f:fb:72:da:25:f0:
                    ad:ad:28:ef:82:b8:9d:10:75:e7:25:fa:ec:e8:a7:
                    75:c0:65:2b:d3:f1:6a:68:4d:48:f6:ca:0d:be:ed:
                    2f:bf:e6:38:e7:18:1a:ec:39:14:b3:2e:ab:af:22:
                    3f:48:ee:63:67:12:a2:80:b0:a2:f5:ef:24:92:11:
                    e9:f8:cf:0f:74:c9:34:ea:d9:0b:d3:bf:35:3c:dd:
                    39:62:2d:f2:fc:31:95:03:60:c0:0c:94:be:21:91:
                    13:b6:c4:4d:5a:0b:33:2c:d9:3c:41:71:82:94:d0:
                    b3:96:e4:80:e1:db:20:8a:4f:ad:c2:2f:27:7a:52:
                    a7:08:45:b5:2c:78:9c:c9:2d:0e:9d:59:35:77:33:
                    f4:41:b5:6d:44:e2:f5:f1:78:ff:f3:12:4e:47:5d:
                    31:36:cf:5a:6d:d0:df:3e:79:4a:19:b7:f9:29:d9:
                    fb:50:75:1b:51:8d:16:e3:c8:33:95:36:a0:53:8a:
                    c0:15:b5:a6:aa:e0:65:f8:e4:be:7a:e3:b2:dd:cb:
                    3d:de:57:8a:02:7b:d1:de:27:cc:3d:41:a8:b6:6f:
                    0b:6f:e1:c9:25:55:5c:70:50:84:1e:da:49:3a:38:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:19:50:7E:00:47:5F:DE:DE:81:11:37:61:A8:1A:D4:F5:81:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:03:d8:dd:16:50:e6:64:63:f1:e6:8e:b0:a1:3e:30:b0:
         d7:ad:fb:fe:b4:c1:4a:dd:64:5a:a3:67:06:52:66:f1:90:fb:
         91:da:e6:c4:fc:65:f6:2f:c4:fd:00:0d:28:65:d0:ce:4d:13:
         7e:b2:5e:52:e9:30:98:6e:34:58:b0:0f:8b:d4:06:95:8f:f0:
         f9:3a:86:e4:70:14:2f:55:1d:7f:55:ec:22:c5:e2:82:1a:01:
         0e:ad:4c:e3:34:1a:8b:dd:2c:7a:8d:2d:ed:3b:3e:bb:a4:02:
         d4:cc:74:7e:43:11:cf:10:7e:0d:46:1c:8e:e2:73:a8:07:20:
         0a:6f:87:95:1e:be:29:74:79:05:0a:d3:4d:bb:9b:47:f4:9a:
         a8:55:0a:c1:73:a8:80:cb:a6:0c:43:a7:e5:27:82:fb:07:bd:
         9e:15:55:e1:ee:60:e1:91:b0:97:38:a1:17:59:cd:c1:83:df:
         af:22:83:ff:fe:ae:1e:b7:53:bc:77:07:00:3c:20:38:ff:a4:
         0c:56:97:db:eb:23:e5:1a:06:7f:3f:93:f7:7c:93:94:8a:c4:
         37:14:0b:47:5a:ca:f1:cc:93:36:29:31:ed:fd:94:ee:e8:08:
         f6:3e:2a:c7:7a:5c:7e:7f:af:cc:dc:5d:fd:90:ae:95:d7:0c:
         52:f9:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:24:56 2025 by rpki-client