Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd0d95e-1c65-394a-a261-0c35c4af7af6.roa
File:                     2fd0d95e-1c65-394a-a261-0c35c4af7af6.roa (raw, json)
Hash identifier:          BQITPjYtJ5S8UdnotzuUqNtJtRU5Kp4TaRaAf8ZJ56Q=
Subject key identifier:   2F:0A:95:15:4A:87:F1:C9:B7:6A:33:63:26:63:CE:9F:65:5D:03:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4BC557AFC2301F581D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd0d95e-1c65-394a-a261-0c35c4af7af6.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     211369
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4b:c5:57:af:c2:30:1f:58:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=04aaee69-323c-4c61-b346-0d4688d1a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:02:38:1f:22:9e:4b:60:9b:9a:26:96:3e:
                    8d:e1:31:bd:22:c0:8b:75:c6:57:e2:4b:18:51:28:
                    2e:be:00:b5:ae:b2:01:62:68:9d:91:73:68:aa:e2:
                    a5:42:fb:0e:ca:94:b7:1d:d3:fd:93:f1:39:5d:a0:
                    69:68:f4:d4:55:ed:81:13:b5:ff:f3:a2:d5:a1:ca:
                    0e:86:bc:37:c7:cc:be:07:77:65:e8:74:30:bf:36:
                    56:55:1f:b0:2a:ee:b2:46:9c:03:cf:cc:bb:0a:cc:
                    86:53:8f:7b:e8:f9:e2:da:89:b7:d3:25:3a:c1:69:
                    f6:e9:54:75:0e:63:0c:32:a0:be:55:0d:3b:46:c4:
                    a4:fe:f4:30:dc:d9:62:f9:56:24:08:ed:62:a5:40:
                    b8:c2:88:12:3f:9d:3c:8e:52:0d:f2:69:f6:98:ef:
                    d8:b3:46:1d:90:e7:a8:37:a7:30:1f:8c:d6:ca:be:
                    b0:fd:21:85:d2:94:58:af:0e:06:2e:4b:cf:06:4c:
                    c0:e4:0f:2e:76:47:f7:19:19:8d:e5:65:60:30:27:
                    a7:ff:98:da:77:5a:39:6a:7a:fd:75:78:1c:19:1f:
                    ef:0d:a3:98:41:72:47:8c:e0:5a:23:df:11:ac:b3:
                    34:1d:51:70:f2:a9:43:07:5c:2e:1a:99:d9:cc:d7:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:95:15:4A:87:F1:C9:B7:6A:33:63:26:63:CE:9F:65:5D:03:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd0d95e-1c65-394a-a261-0c35c4af7af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:98:53:10:20:2d:33:53:d8:21:da:2d:6c:74:e4:85:0e:
         ee:ff:32:10:4e:52:15:3a:92:33:7c:85:14:25:78:00:6b:8b:
         0c:f7:a2:4f:11:64:e4:9d:ea:ea:78:ba:dd:87:46:91:52:6a:
         58:8b:0b:04:d5:e8:fe:fa:1d:16:e9:d8:2f:b0:52:a7:84:d3:
         2d:40:79:2d:61:1d:ec:24:05:8e:fc:62:6d:48:ce:78:62:37:
         1a:ba:88:bf:2b:b8:91:e1:6e:12:70:cf:15:fe:a2:6e:6d:ce:
         46:99:5a:49:a7:d5:c1:04:a1:8f:70:03:83:64:ad:3e:1b:27:
         55:d8:42:d5:57:5a:85:51:e5:8a:0e:da:7b:db:e7:50:23:62:
         a3:e6:f5:dd:d4:51:91:b7:c7:de:3c:2c:f2:14:38:21:24:18:
         a9:37:83:8e:29:52:72:00:a3:76:96:be:fb:53:25:bd:51:c1:
         d2:6c:3b:6c:17:86:30:a5:cc:15:35:ab:1b:dc:d4:6c:dd:50:
         48:48:0b:8c:b7:bf:ad:b1:eb:d4:a2:b7:b2:e8:0e:a1:a2:25:
         3c:77:92:0d:14:75:30:73:76:28:be:39:71:5f:eb:44:3e:3c:
         65:3a:08:3a:b6:b1:52:1e:2f:d3:7c:a2:cb:8e:f3:7a:fb:74:
         63:3d:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:34 2025 by rpki-client