Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
File:                     13ccc359-3db6-3e92-90e6-38596962acd9.roa (raw, json)
Hash identifier:          CuauVASThTCQaAHV+b3sozO3i5CeVRAGKi/e8OYjJzw=
Subject key identifier:   6C:B1:D7:55:04:BA:4C:51:DD:DD:0C:2F:0A:BB:09:F9:51:84:91:C3
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584B328C34B678978ACCB17DA930
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     46510
IP address blocks:        2001:504:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:34:b6:78:97:8a:cc:b1:7d:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=ae5acd3d-940f-4d40-975f-26ead53d1ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bf:e8:5c:6c:30:1e:55:56:d7:b3:43:f4:0e:
                    c7:f3:32:5c:06:b8:f7:ee:20:a5:68:ba:21:1f:87:
                    04:78:02:12:ed:e8:87:39:58:ea:3b:c3:3d:b4:78:
                    8d:2c:42:60:ce:49:aa:5c:d7:4f:29:3c:32:a4:6c:
                    eb:61:18:2d:ca:63:37:3b:7e:a7:85:c4:4e:e1:9d:
                    1d:04:ee:d9:01:b0:11:c5:ec:c4:14:a5:15:aa:4f:
                    1a:e4:08:bb:f5:bb:51:1b:d1:31:80:b9:7f:07:04:
                    4d:79:7b:2f:f6:01:27:2b:2b:b2:ee:8b:bc:6f:1c:
                    db:1b:67:4d:4a:36:07:dc:a2:ee:45:0b:ea:2b:c1:
                    38:80:59:7b:1a:03:9d:62:65:c6:a8:35:b9:1f:ed:
                    b7:02:18:7b:11:03:0a:f0:e2:a4:ef:0b:4d:37:3f:
                    4a:45:c4:4f:02:51:0d:1c:43:a1:6b:90:07:34:94:
                    c7:81:a8:58:d6:d8:0e:75:3b:31:83:e7:25:60:36:
                    f4:e3:42:a7:74:3b:54:14:d9:f1:93:9c:ac:87:6e:
                    64:eb:58:1b:b2:78:a3:e3:56:f9:39:94:e2:00:ea:
                    9a:31:c2:96:48:a5:7d:53:e5:2e:2e:ec:7f:c4:bd:
                    7a:ef:17:c5:30:ad:de:c6:40:95:f8:f9:97:aa:9d:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:D7:55:04:BA:4C:51:DD:DD:0C:2F:0A:BB:09:F9:51:84:91:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:3e:5b:64:54:3b:e4:0f:87:43:f8:5a:e9:0d:31:6d:82:
         a7:d4:69:8d:8c:a9:8e:23:c9:3d:2c:9a:74:ac:74:fd:d6:ee:
         cf:6f:74:55:6d:d5:d8:92:d4:c1:5d:27:db:2f:35:8b:92:49:
         75:17:6c:fe:c7:f3:4a:e6:10:1f:0c:59:b0:87:36:d4:ad:ab:
         1e:da:27:a3:f7:d0:d2:7a:1b:03:7b:7a:dd:fd:bc:e5:db:67:
         fd:09:4a:58:9b:65:27:60:21:86:cf:38:57:07:ba:45:70:5e:
         74:e3:74:6b:8a:f7:da:9e:5b:71:bf:00:40:f9:e4:f8:7b:42:
         38:60:36:de:56:ca:dd:1d:b9:bd:38:ab:65:8d:be:f6:c4:41:
         df:4d:13:fe:9b:00:79:c1:cd:c4:46:7a:13:b4:13:ac:d0:33:
         88:9e:67:56:ad:6c:99:57:df:59:f1:91:c8:a6:95:41:b5:69:
         62:61:e4:67:74:4e:21:78:fd:5e:c7:63:4c:62:cf:b4:d6:ed:
         e6:8a:53:df:3d:9d:1a:d2:8a:20:e4:b9:e4:a1:33:2f:b1:fd:
         f9:cb:bc:3c:6b:b5:2c:a9:2f:93:09:f0:4e:e0:86:30:70:1d:
         42:86:53:dc:85:f9:e3:86:25:2b:5e:18:51:86:20:6c:02:d0:
         c8:a8:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:36 2025 by rpki-client