Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
File:                     b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa (raw, json)
Hash identifier:          nkoH1CA9gUfwBnCEjbXOyIONJa02CehwScRr1B7k+Bo=
Subject key identifier:   11:93:31:47:24:29:1D:97:18:C1:2B:24:00:8B:01:38:56:E8:CE:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF951602DD535B282A7824940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396603
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:60:2d:d5:35:b2:82:a7:82:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=fc4e8372-4270-40e0-b593-4310848e640a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:31:e5:1b:98:eb:48:18:1e:2a:75:fe:32:
                    29:bd:38:b0:fe:7c:b0:30:eb:27:26:a2:4b:f1:5d:
                    6f:4d:ce:1a:e2:cd:eb:ea:a7:b6:0c:39:71:91:d0:
                    57:60:e7:8c:5e:c9:11:75:9e:91:2d:1c:f4:d1:96:
                    69:54:19:cd:3f:93:79:07:7f:bd:5e:b0:d5:a3:c3:
                    67:5b:03:4d:a8:8d:09:94:1a:a8:19:f2:8a:fa:6e:
                    bf:8c:b9:f6:7f:62:ec:76:aa:b2:b2:04:4d:3b:c4:
                    b6:d9:bf:ec:d1:df:6f:3b:2b:6e:2e:00:e7:de:3a:
                    b6:2b:4d:01:2f:28:bf:80:4c:60:06:51:f0:e2:1f:
                    2f:bc:42:ab:cd:de:96:2f:fa:f2:f7:0d:10:6a:be:
                    76:de:90:63:56:a8:63:cb:f2:da:bf:05:8f:50:65:
                    ce:bc:3a:99:62:25:76:6f:da:c0:90:e1:b9:2f:be:
                    5d:de:13:1b:99:96:26:bc:de:df:2e:5d:46:35:6c:
                    65:90:6a:e0:95:0d:1a:4e:3c:00:f6:a8:1c:da:42:
                    03:ce:83:1a:03:66:5a:3c:b0:33:f4:10:6a:e7:be:
                    f1:ba:57:f4:34:92:64:fc:f6:58:0d:d4:4d:1c:f2:
                    01:c9:11:eb:94:64:e8:5f:3f:94:82:25:e7:4b:8a:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:31:47:24:29:1D:97:18:C1:2B:24:00:8B:01:38:56:E8:CE:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:88:4e:45:70:e5:20:50:1f:77:e8:af:5d:9c:86:25:62:
         6c:ec:9c:57:28:a7:62:50:85:68:9c:82:7c:80:7d:4c:b5:07:
         4b:49:09:66:94:2a:ad:a7:71:1e:93:ef:3e:7c:c9:2d:9e:f8:
         e6:d7:c6:ef:96:df:45:e8:15:13:0c:69:7c:9e:71:e7:ab:ef:
         1d:d9:0a:c0:da:06:b1:8b:81:cd:dc:01:99:f1:1d:33:b1:7c:
         5f:06:46:2c:e0:4f:4c:cb:85:8d:5d:f9:c7:e4:7e:99:41:ea:
         01:53:7c:b3:5b:e3:6c:82:11:43:b1:cb:bc:7c:ad:3b:08:d7:
         73:41:d1:51:68:b4:5a:dd:7a:a4:da:f1:5d:34:ca:35:58:f5:
         6a:7a:5f:2e:7c:11:b3:84:ce:91:21:7f:15:b2:68:8e:07:00:
         75:2a:d0:e1:9a:e6:22:53:a7:fc:fd:b4:fe:bd:18:62:3d:23:
         82:73:56:23:55:f1:ec:c5:4c:45:aa:19:ee:4c:9b:c6:57:23:
         ee:d8:e7:d7:a3:c7:8b:c7:3c:7b:38:5b:ed:9b:1c:ff:31:2a:
         72:f7:1d:a4:2e:15:ca:23:83:77:f4:35:e4:4a:d5:c2:60:40:
         6e:4e:de:6e:4b:01:48:da:91:85:32:7b:77:65:a3:6c:9f:87:
         1a:df:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:56:01 2025 by rpki-client