Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96ec85d-0315-31b9-a194-cc8da546b643.roa
File:                     e96ec85d-0315-31b9-a194-cc8da546b643.roa (raw, json)
Hash identifier:          DzadELjF6DCR2C2fO7foA5qP+ix9mLTsstL8Kc2eB8U=
Subject key identifier:   76:74:83:38:CA:3C:82:EA:81:D6:F6:00:D1:A5:92:8E:51:AA:49:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2B55BE447EC84A3C3D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96ec85d-0315-31b9-a194-cc8da546b643.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396583
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2b:55:be:44:7e:c8:4a:3c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=4276b818-7dcd-4740-a897-6d889c7cfb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:55:51:37:9b:8f:6b:16:c6:af:b7:88:de:
                    42:e2:64:33:f6:41:9d:30:20:05:71:21:3a:79:b3:
                    eb:98:f2:bf:f5:22:89:ff:cf:09:d1:02:84:bd:d5:
                    1e:01:0e:05:8e:37:c6:e3:6b:e6:12:78:d1:1d:20:
                    14:27:2d:75:ea:a6:ac:68:88:e5:29:94:10:26:6a:
                    2d:2d:f1:de:ee:87:77:7b:79:c5:ba:41:21:d6:c7:
                    00:9e:80:41:6c:ec:b4:a7:da:f6:d0:de:7a:44:ad:
                    aa:dc:6a:5d:b6:82:0c:6c:a9:bc:b4:84:ae:ff:85:
                    fe:d3:07:5b:e9:f5:46:94:40:bc:10:b9:9e:55:89:
                    ca:c2:7c:2c:c5:0b:2f:ac:7d:3e:89:d5:5b:bb:55:
                    d5:04:00:e9:ca:c1:48:83:17:11:7f:c3:de:4f:68:
                    93:79:0a:68:87:27:54:31:12:df:2c:36:bd:08:d0:
                    80:9d:70:e5:8e:ab:04:09:36:71:91:41:c6:11:3e:
                    d8:7a:c6:a8:d8:98:98:0e:19:e9:98:20:bb:1a:f5:
                    eb:eb:7b:c2:d2:f6:b1:bd:2e:86:51:12:d9:03:c9:
                    dc:f6:3c:7f:96:87:b2:f5:f3:b7:fd:d5:7c:86:04:
                    e4:b4:5a:ff:e5:95:6b:3b:29:02:25:1c:40:e0:db:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:83:38:CA:3C:82:EA:81:D6:F6:00:D1:A5:92:8E:51:AA:49:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96ec85d-0315-31b9-a194-cc8da546b643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:50:69:1c:a6:91:3e:92:0a:23:70:48:2e:f5:21:96:3d:81:
         49:97:a0:54:47:35:49:fb:cc:02:88:83:51:7a:61:1f:62:37:
         ad:ca:03:2c:4a:28:b5:0f:8f:2b:15:47:8d:76:b0:8c:a1:d6:
         70:5a:f0:e5:9a:f7:dc:e8:61:83:ae:c2:21:e4:2b:18:d7:f3:
         c6:43:2f:0f:18:f9:a6:e4:48:9b:68:63:ef:d6:6e:6c:ce:6c:
         3f:64:cd:9e:e3:b3:02:17:05:90:f1:86:13:c4:b5:55:6d:70:
         a7:42:d0:f3:4d:0c:a8:30:4b:b0:a9:f2:5b:ac:76:33:89:63:
         d5:6a:0a:3f:5f:7b:9b:6f:5b:97:d2:a6:15:53:86:f3:9d:e5:
         4f:33:60:1a:e7:8e:6b:6a:a8:24:f0:a3:10:25:70:b6:f8:de:
         bd:cc:85:e0:7d:ce:8e:b9:98:47:45:13:93:8b:65:b5:58:fa:
         17:d9:1a:15:cb:f5:00:27:31:79:be:fe:68:70:01:31:a3:e2:
         26:fd:e2:fb:f8:6e:ae:db:75:d2:4a:10:12:1c:bd:c8:d6:5d:
         32:a6:46:ba:c5:19:73:1c:ba:22:f2:34:2b:17:a8:34:a1:d0:
         5b:80:3b:23:db:db:55:18:28:e5:7c:aa:ec:e4:b0:92:28:42:
         86:82:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:25:08 2025 by rpki-client