Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
File:                     ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa (raw, json)
Hash identifier:          1+lxI9npNsReV1eYB7N/Fr/8B0jLiWSCHNLXXljq/JY=
Subject key identifier:   2E:59:B3:CC:EA:75:D5:86:08:42:04:13:82:3D:8C:66:6A:B4:F4:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9515E2D91606A3AC5C68900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396547
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:5e:2d:91:60:6a:3a:c5:c6:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=dbd4741a-db16-4f89-a234-f5b4bf799518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:4d:48:1f:af:fd:31:58:f4:55:87:49:ae:
                    5b:73:03:bf:8b:87:64:20:ed:10:ea:b4:fb:a7:22:
                    38:d8:13:53:77:25:04:4c:6f:82:01:c0:fb:52:cb:
                    23:a9:f3:65:ae:35:d2:90:b4:7e:42:2a:de:11:c9:
                    92:58:bd:e5:93:13:39:41:cf:16:a8:88:58:e7:76:
                    39:7f:68:06:31:e9:bd:5a:40:94:55:8a:d3:6d:36:
                    fa:26:6a:a7:9b:16:78:37:d1:1e:bd:d5:98:c7:fd:
                    f7:cf:cd:67:76:7d:a6:d6:ee:96:26:70:5b:17:16:
                    eb:4c:6d:d7:e5:a9:e7:00:ba:0a:74:32:3e:e7:8a:
                    40:e2:25:58:59:8d:bc:67:b2:09:3c:36:61:93:bb:
                    9b:ae:49:32:fd:c1:e1:74:65:80:f8:03:f6:9c:08:
                    d9:4d:f4:52:ef:79:a1:cb:3e:bd:52:7a:e5:fd:ba:
                    da:7b:d5:91:79:ee:2e:24:ba:c2:ab:15:d9:2e:b4:
                    8c:33:d1:af:b8:4c:82:6b:8e:ec:fe:1d:f7:ea:e3:
                    14:47:bd:3c:53:0a:50:d1:eb:8d:aa:24:7b:56:90:
                    b8:79:b8:fb:4d:84:68:c1:e9:68:a1:e0:d1:aa:de:
                    0c:6b:e5:ea:60:20:ee:ea:d1:84:58:fd:67:2f:8a:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:B3:CC:EA:75:D5:86:08:42:04:13:82:3D:8C:66:6A:B4:F4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ce:3f:8c:e1:a4:81:df:0b:0c:b4:db:fa:6e:36:77:18:39:
         1d:fe:4a:66:45:1d:58:99:d2:49:bc:7f:f0:ce:ca:62:cf:df:
         6a:42:66:8c:9d:88:29:a0:f0:a3:53:04:a2:6a:ba:f0:8c:97:
         d0:e0:2e:a4:e6:66:0d:bd:53:8a:2c:77:30:bd:26:b0:97:e3:
         fd:c4:21:14:e7:b3:f9:69:c9:9c:c2:18:2d:c2:f4:30:3f:6a:
         c1:4c:b9:e6:99:08:f3:6f:d0:e0:39:05:5a:fb:89:28:d5:1a:
         73:2b:0b:fc:83:62:09:3f:27:81:74:23:57:f4:65:f5:18:7f:
         fa:2e:12:83:c1:9d:b7:77:fc:3f:a3:47:31:cb:88:e5:d1:01:
         55:e5:ff:1a:d6:44:ee:02:4c:b9:56:cf:2a:0c:5a:c6:fa:a8:
         31:9e:30:db:88:9d:1a:94:59:bf:a8:3c:36:ac:f6:15:5e:d1:
         52:1a:3a:9c:23:d1:6b:a9:15:06:ac:ce:ca:f4:81:32:e2:1e:
         ae:28:12:b5:8e:94:fb:8f:44:6e:5d:a3:94:c3:ca:d5:c2:de:
         35:2f:cc:4b:46:ef:91:ce:12:9c:82:4c:26:7a:5a:e6:cb:8a:
         f6:f9:0b:7f:82:09:59:4f:5a:09:25:c8:d9:61:ff:96:b7:aa:
         eb:03:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:31:55 2025 by rpki-client