Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67c641f-9c82-3d35-8261-e316e1db2891.roa
File:                     f67c641f-9c82-3d35-8261-e316e1db2891.roa (raw, json)
Hash identifier:          t+/FXX+t1WrsumVNFvfbMXh+CEvvtY3fSCNxxGIaH+k=
Subject key identifier:   4F:80:15:B2:58:02:44:41:D4:1D:42:61:FC:0D:E2:D9:EE:14:D3:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC270BF25BD3B592BC8BBDF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67c641f-9c82-3d35-8261-e316e1db2891.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     396542
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:bf:25:bd:3b:59:2b:c8:bb:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=eb4ea05f-b9b8-4777-8818-d9c5792abd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:76:8e:49:59:4c:53:9f:40:fc:19:55:7e:
                    be:7a:24:c7:6b:ae:17:b9:2f:5c:00:9b:92:20:ae:
                    71:1f:eb:7b:2d:17:36:6e:0e:e7:98:6f:50:c8:ee:
                    12:c6:8a:55:86:be:63:5a:a0:03:0a:5a:b6:39:53:
                    23:83:09:51:85:c6:fd:2f:4f:fd:67:a0:e2:b5:8e:
                    98:7f:a9:e0:e1:67:ab:d7:02:71:91:d4:64:98:00:
                    37:e0:40:0a:bf:bc:fb:10:8c:95:2e:f2:28:56:8a:
                    c6:65:78:0e:e0:ff:4d:79:ba:ba:7a:d2:46:b9:2e:
                    14:d7:24:14:39:ee:c7:d4:88:d6:b1:0f:53:ec:22:
                    b0:3a:41:e8:1a:b8:93:5f:fc:08:d6:63:4c:e4:ef:
                    c1:71:b0:09:32:f0:2b:03:f4:8f:e1:ad:42:bf:e7:
                    13:82:1c:81:a9:5c:c3:d7:eb:fe:42:f4:27:cb:c5:
                    74:ed:a8:65:50:36:b0:fe:3c:de:b4:5c:e0:bb:a4:
                    0f:35:88:b4:69:03:26:0a:3a:25:72:f8:94:31:af:
                    ea:fc:77:64:85:e1:4c:28:04:3c:5c:91:b2:72:a3:
                    f6:89:03:f6:3f:4a:98:54:da:9d:aa:ae:83:15:b0:
                    f4:2e:5a:bd:78:12:1f:50:7d:ea:1c:e4:76:bb:fd:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:15:B2:58:02:44:41:D4:1D:42:61:FC:0D:E2:D9:EE:14:D3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f67c641f-9c82-3d35-8261-e316e1db2891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:1d:f5:7b:92:ca:65:f9:e5:42:da:f5:ff:2a:7e:44:a9:
         09:34:ef:96:0c:5f:73:72:09:eb:21:5b:9f:89:e6:37:49:1d:
         c0:28:31:58:66:49:95:44:75:f5:17:5a:b0:8d:20:27:9c:81:
         ca:5b:33:6e:8f:d1:ec:8f:74:95:ac:00:ff:c2:9f:2e:1b:0a:
         e0:2b:cf:58:b9:16:03:99:a4:56:c8:ce:52:a8:4d:f2:d7:5a:
         24:80:e5:26:c1:20:69:26:45:35:62:7b:9b:a6:87:0b:2a:d8:
         05:a9:1e:5d:c9:45:14:a1:7c:67:57:a1:51:ec:08:ca:c4:b8:
         b4:4b:0a:51:69:b6:90:9f:90:e3:fc:c9:ad:a7:30:00:85:5f:
         e6:ba:00:fc:9e:2b:3e:5f:00:dc:5a:39:8d:8a:08:3e:ae:51:
         db:48:62:66:55:74:a5:16:ff:1b:6f:ff:1b:30:13:d0:11:b7:
         d0:e9:2c:44:74:82:9c:9f:8d:76:ac:87:43:d9:da:b8:84:3e:
         62:3f:9e:40:71:19:c0:79:50:dc:1f:77:36:b6:16:2a:26:34:
         fc:b0:ea:3e:64:52:96:5c:84:f2:41:6c:ad:00:05:cd:02:1d:
         9c:38:5b:bf:cd:00:d4:25:28:55:ae:5f:71:62:e8:66:34:ec:
         c5:ad:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:11:07 2025 by rpki-client