Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30100270-bba7-3c9e-bc4b-e81bd3f4593d.roa
File:                     30100270-bba7-3c9e-bc4b-e81bd3f4593d.roa (raw, json)
Hash identifier:          mf9RiAEa+ns2gJyFdcgUlb5rjx4STtS5mae0knWsigM=
Subject key identifier:   BD:9E:AE:B4:A7:AC:A5:04:C3:C3:E6:D8:EB:7C:D7:45:EF:41:2E:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B62C489B7863E618CB8A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30100270-bba7-3c9e-bc4b-e81bd3f4593d.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     36616
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:2c:48:9b:78:63:e6:18:cb:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=e5879e34-100e-4357-a40f-95859bdb03cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:01:5d:e4:8e:df:25:4d:a5:e9:ac:d7:ff:
                    fd:5c:e3:2c:d5:2d:00:ed:67:2b:7b:22:cc:b6:89:
                    3e:bb:f0:ee:fe:8b:33:45:fa:0e:71:24:14:7f:90:
                    e9:88:82:75:bb:4e:43:bc:7d:db:e1:0f:b0:9b:aa:
                    16:3c:fe:c4:ab:f6:1e:59:82:ee:65:91:fb:da:0f:
                    8d:e3:4e:e2:61:ff:69:f7:2c:ad:36:91:66:e4:0a:
                    a7:be:7a:25:5e:11:1f:f5:1e:d6:e0:ab:6c:02:15:
                    b9:b8:6d:7e:32:15:bd:a4:da:f4:19:1a:b3:11:d3:
                    ad:26:3c:7a:58:60:f9:b7:ad:fa:d1:eb:41:57:0f:
                    5f:c5:ee:25:9d:9e:6d:4d:c2:b1:ba:4d:81:b5:83:
                    6b:a6:34:70:0a:2a:c5:a0:51:96:2d:4b:b4:f7:4c:
                    df:25:44:1f:5e:73:e5:f3:45:d2:65:19:05:62:7e:
                    67:03:6c:e6:98:2e:18:cf:01:43:cf:8c:d5:9f:03:
                    10:e4:c7:49:4c:59:bb:06:46:62:4e:87:44:e7:01:
                    c2:82:c9:14:5a:d5:54:93:28:ee:5e:ad:17:6e:29:
                    ba:c1:44:d5:7e:d0:24:7c:b5:bf:a4:6b:18:41:d4:
                    d0:fa:73:fd:ef:65:aa:14:f2:89:da:a0:70:e6:ef:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:AE:B4:A7:AC:A5:04:C3:C3:E6:D8:EB:7C:D7:45:EF:41:2E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30100270-bba7-3c9e-bc4b-e81bd3f4593d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:3d:30:5f:ab:c8:93:77:36:0d:56:29:3f:cc:00:e0:ab:
         f3:cf:7c:87:b7:1e:49:f1:b6:34:38:1b:d6:3b:d8:8c:53:c3:
         88:40:c5:e3:fc:fd:1d:ad:b8:a8:18:a0:7b:52:94:41:6b:ed:
         3a:10:8a:ef:90:da:a1:0e:0c:3f:ff:06:76:41:a2:8d:bb:10:
         6f:24:8d:02:aa:5c:d0:ce:8d:46:ac:13:3a:0e:fc:49:cd:43:
         0e:fc:31:0d:37:2b:0e:a9:fa:a2:ee:96:dc:5e:fd:ab:18:9f:
         46:4f:30:cb:b8:c2:59:19:2e:69:b9:14:31:ab:11:ea:b9:af:
         2a:b8:e4:6e:d4:73:99:4e:77:00:4d:26:ae:70:40:f8:1f:ed:
         5a:d5:b0:81:27:41:ee:4d:aa:31:a7:6d:e9:5d:67:47:ad:13:
         47:cf:58:83:92:29:1c:44:26:66:56:cf:a3:f6:90:02:11:1a:
         7e:5c:94:c7:db:11:f8:e7:82:68:d3:fd:2e:f0:91:49:3b:9f:
         c2:73:be:47:94:ba:a9:30:62:5c:fd:9c:22:f0:63:c6:bb:d6:
         a9:e2:6d:76:b4:64:14:45:0f:3c:b3:f6:66:71:cf:34:46:ed:
         45:b1:8e:0b:6f:65:ed:40:68:37:58:c8:f8:68:15:f0:54:03:
         0b:9f:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:54 2025 by rpki-client