Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809b0b8a-9be9-32bd-94c6-70e9d1a85a47.roa
File:                     809b0b8a-9be9-32bd-94c6-70e9d1a85a47.roa (raw, json)
Hash identifier:          TgsTTNzMZ0kfgllMBJ/HgHfyjwFqsIu2qoNCX4XA3WQ=
Subject key identifier:   02:80:13:49:3E:B8:D4:3B:05:CD:32:D3:78:35:AF:C9:1D:68:FA:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D49D073AE73922D26D680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809b0b8a-9be9-32bd-94c6-70e9d1a85a47.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396563
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:49:d0:73:ae:73:92:2d:26:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=cdff89ad-141a-489f-8760-1e42a94b291e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:84:ea:78:ec:96:ff:81:12:b2:9f:19:c3:
                    fe:64:71:f0:ac:c8:62:f6:bf:d9:82:19:6c:b9:de:
                    09:c9:96:cd:1d:5e:e5:ab:a1:72:50:01:0a:e8:44:
                    44:98:02:73:6c:e3:ef:76:04:9f:06:e8:4a:38:3f:
                    e3:f7:19:58:a2:27:d6:b3:f3:c2:40:0f:a1:0d:9a:
                    00:22:19:b5:28:63:0d:89:c1:16:c9:65:ea:b3:08:
                    09:94:08:48:b6:7a:84:3c:f8:9a:58:f2:29:b2:61:
                    b1:0a:6b:05:42:c3:72:f4:96:2e:84:bb:4a:ad:95:
                    3a:ce:5f:1d:80:93:d9:0b:fd:55:5e:02:b7:82:ba:
                    16:cf:14:4d:e5:88:95:64:12:e7:3e:c0:6f:f2:52:
                    e6:f3:3b:a8:35:94:ab:1a:17:63:8c:61:0b:2b:d9:
                    f1:ca:d0:b0:44:40:d5:bb:e4:7e:09:92:4a:d0:a4:
                    f9:f3:2f:96:76:0b:74:45:37:4d:cb:9b:8e:00:1d:
                    f3:ed:9c:8b:ef:45:8e:37:f8:d5:e1:f9:8f:59:71:
                    e2:9e:9f:0d:e4:fe:16:b8:8a:4b:57:7f:ce:fb:d4:
                    56:62:5c:07:e1:65:1e:e6:18:ac:64:4e:0a:8d:d0:
                    4c:17:46:ad:35:a2:61:b7:0a:76:7c:d2:ea:3d:ed:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:13:49:3E:B8:D4:3B:05:CD:32:D3:78:35:AF:C9:1D:68:FA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/809b0b8a-9be9-32bd-94c6-70e9d1a85a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a3:b0:88:23:37:9c:91:68:bb:9d:46:e4:f3:01:58:26:14:
         34:0e:83:9b:28:c2:3a:7d:dd:3d:44:60:a7:11:d4:c4:19:11:
         d6:89:bc:85:64:28:d4:17:d5:5c:6c:f4:b7:a9:ea:3c:00:89:
         a1:27:bf:ab:3e:7e:a9:85:90:51:3f:c4:06:40:55:01:74:b9:
         69:7f:fc:60:60:86:54:66:1b:4a:4e:99:0c:93:2d:79:0f:7e:
         c9:24:bb:e6:0a:58:26:45:af:64:c3:8a:f6:11:d5:39:c7:57:
         9e:f5:a8:1e:06:8e:80:87:f5:fd:db:8e:38:3a:f5:69:81:20:
         4c:13:f9:09:4f:92:6b:d1:f7:06:07:3f:3c:0c:fe:c2:be:ba:
         8e:e4:76:11:ca:29:c8:96:c3:62:f1:50:a2:79:dd:de:fc:20:
         26:76:f6:65:d8:59:84:14:62:9f:f7:1c:76:c5:37:f3:b1:3a:
         94:31:1c:a0:33:b1:9c:c9:3e:7b:a2:f4:b8:38:fd:07:80:57:
         1e:08:96:e1:9e:b5:8c:9d:19:d4:47:37:b8:82:b8:3c:e2:82:
         28:e0:e7:29:d8:29:d7:dd:28:0f:54:c4:78:dd:2c:93:1f:30:
         8d:14:c6:d0:c9:77:5d:0e:b5:e7:37:6d:94:e9:88:0b:51:49:
         9d:81:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:15 2025 by rpki-client