Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7633559-39ff-3117-ad64-7c86f9af39ca.roa
File:                     c7633559-39ff-3117-ad64-7c86f9af39ca.roa (raw, json)
Hash identifier:          r/Cbm4ExaIwMrYD/mKjEpLE5nzfCD6SFGEbGGUBqd9o=
Subject key identifier:   02:0B:88:52:97:FF:68:38:37:7B:2B:57:2A:B0:77:00:30:3D:5D:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4691F0CA434F20F3AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7633559-39ff-3117-ad64-7c86f9af39ca.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396578
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:46:91:f0:ca:43:4f:20:f3:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=9736d879-7d4b-44e1-a1e0-71cfd8b926fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:d4:45:04:e6:02:d4:cd:59:82:aa:22:f9:
                    b7:be:69:40:d6:aa:53:ad:e0:ad:34:76:b2:b9:cb:
                    0e:13:f9:5e:82:91:da:88:7a:d2:91:38:a3:83:af:
                    44:d6:2f:6d:38:f5:61:22:09:ca:bb:1c:b3:20:d0:
                    60:5b:06:5a:95:d3:4d:3f:47:14:c7:9e:3f:ca:f5:
                    0d:82:4d:c0:88:ac:db:5b:46:4a:5a:04:02:77:32:
                    ab:dc:c4:4a:e1:49:db:18:54:0b:06:47:69:0d:0c:
                    f7:cf:6c:35:cf:f0:48:0f:0b:9b:35:86:df:56:60:
                    46:5a:c1:f6:5f:19:58:b0:ef:e2:46:b2:bd:96:56:
                    66:11:9c:f8:f6:92:8e:79:56:2a:64:50:a1:52:91:
                    88:5d:d0:d0:d2:a5:4e:fa:dc:6b:42:ec:9c:b9:2d:
                    b2:87:e5:d1:29:00:b8:73:eb:e6:2a:79:55:32:f6:
                    57:4d:6f:01:42:1b:0f:fb:8a:17:d2:88:08:a8:d1:
                    1b:ab:21:18:8a:03:79:05:2d:f5:fa:bb:6e:dd:0d:
                    dc:98:66:5f:d3:4e:fe:1f:2a:95:a6:b7:d0:1f:41:
                    66:07:bc:f8:05:51:ea:44:66:fe:65:f8:e9:e2:80:
                    6e:39:29:28:3e:cd:1c:88:0c:1a:6c:e8:0f:4d:76:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:88:52:97:FF:68:38:37:7B:2B:57:2A:B0:77:00:30:3D:5D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7633559-39ff-3117-ad64-7c86f9af39ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:92:73:64:55:c2:f5:76:17:7c:f2:6d:cb:58:0e:e2:25:dd:
         91:86:5e:bf:92:70:bd:f3:c6:c9:42:72:19:ec:03:d4:00:54:
         7a:6a:e3:46:71:9a:f7:62:b4:05:48:88:46:41:ac:5f:ad:56:
         53:a7:a7:bf:66:58:af:19:60:b7:38:13:53:a1:6a:bf:00:dd:
         b7:cb:c9:1c:e2:ce:5b:62:2d:af:73:5f:11:7d:74:26:9f:1a:
         f0:a7:1f:1f:59:f6:c9:1f:67:a9:b7:c7:b4:69:4e:8a:41:fa:
         cb:9e:96:04:14:8f:a0:ea:86:09:40:33:42:b5:4b:78:d0:10:
         55:34:1e:59:31:d5:e6:d6:79:34:6c:21:4b:00:68:5c:b7:50:
         70:d0:35:29:6f:7b:78:c7:a5:c4:cb:9e:54:8e:da:b0:4d:53:
         c7:49:14:57:7b:09:ca:7d:06:4e:bc:99:82:8e:fb:31:04:e6:
         da:70:74:24:fe:d0:37:cd:ce:41:82:51:2a:91:ee:6f:67:86:
         f7:1f:88:73:d6:f0:ba:9a:d6:28:4e:1c:a3:54:15:19:dd:2e:
         71:4e:34:ba:41:c6:2a:9b:5c:0b:8d:8c:3d:07:a1:f9:e3:6a:
         78:97:33:ce:ae:34:34:47:ad:2f:e8:b3:11:e9:7f:43:77:de:
         1a:6c:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:51 2025 by rpki-client