Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0292b25b-2536-3d44-bd0d-4edb9b3bde61.roa
File:                     0292b25b-2536-3d44-bd0d-4edb9b3bde61.roa (raw, json)
Hash identifier:          zUXo8UGArhCpthtuPq1mCrOfL7UYKQUfoxBqf6rfIIM=
Subject key identifier:   37:47:E8:CC:D5:47:B9:9A:FD:8D:11:26:B5:65:F4:AB:8D:1A:10:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8382157F84BE0472C68644C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0292b25b-2536-3d44-bd0d-4edb9b3bde61.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     396563
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:15:7f:84:be:04:72:c6:86:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=48812f99-085c-403e-93e3-54d8a768c280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:86:a5:37:f3:11:82:96:d7:9a:07:7f:85:
                    75:09:dd:03:4e:de:ec:39:41:37:d5:aa:f8:25:9c:
                    4a:0b:11:d6:c3:3e:9a:e8:a3:42:c7:8e:3b:17:9d:
                    4a:5c:c7:6a:c4:59:49:68:6e:42:39:d5:6a:9d:8c:
                    3c:d4:d3:c3:c5:bf:5b:2c:07:7d:69:f3:60:d2:bd:
                    ab:67:24:bf:f3:5a:81:cf:4e:f6:c2:aa:83:3a:7a:
                    9f:c2:b6:a1:6d:e0:87:53:4d:8f:00:ac:9d:44:2d:
                    8f:6a:eb:dc:9e:1e:6a:bb:52:3a:1f:77:8a:ee:a7:
                    a7:97:1c:2f:a8:d4:94:d5:bb:cd:e6:33:14:1e:b5:
                    eb:6b:71:56:c0:e6:5b:a0:e7:a7:8b:45:aa:05:cc:
                    07:6f:5f:7e:e0:11:37:59:0b:a3:e5:26:71:d0:62:
                    aa:56:d1:ac:6f:79:6e:c1:22:de:de:cb:8b:76:1a:
                    b5:0e:af:c2:87:70:31:aa:1c:33:38:64:73:04:4b:
                    88:aa:4c:9d:de:03:b0:52:f8:ed:cc:3a:1f:42:99:
                    22:d9:41:00:17:dc:4b:35:f7:6c:19:8d:0a:8b:ad:
                    82:98:95:af:0a:95:f0:f1:34:85:e0:c3:b1:36:52:
                    6e:a1:99:59:db:f0:2b:c1:96:b3:ca:55:92:26:70:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:47:E8:CC:D5:47:B9:9A:FD:8D:11:26:B5:65:F4:AB:8D:1A:10:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0292b25b-2536-3d44-bd0d-4edb9b3bde61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:f7:d9:2d:ff:84:a5:71:cc:c9:ac:18:51:98:3b:0e:61:
         6a:ab:a1:ef:fc:b6:90:ba:03:47:1f:0b:f6:65:d0:c2:3b:02:
         09:0d:d6:92:93:5a:95:b4:04:53:ab:ae:96:8e:fc:2f:6e:ad:
         25:ee:a9:79:10:2f:78:0a:50:bd:fb:aa:e6:d5:f7:59:c8:e8:
         31:1d:c1:f3:7f:1a:cb:0d:ed:8c:b3:c0:bc:b2:96:4c:bb:f5:
         a8:03:cd:97:40:73:df:4c:8a:79:91:6b:52:15:61:b8:1f:fd:
         f6:0d:71:c8:a2:5f:5f:6d:2a:b0:5d:a2:c9:c6:3c:ed:a9:da:
         d3:e8:ee:a4:1b:27:23:ab:ae:f3:e0:7b:31:5c:d7:7d:17:4c:
         b4:02:b8:fa:67:fd:2e:c7:4d:db:87:a2:6b:f3:fd:09:b0:c7:
         34:80:fc:56:ec:f4:54:d0:cd:b4:c8:17:bf:8a:76:aa:c9:89:
         5c:7c:84:ff:e1:c6:bb:a5:49:9e:5b:dd:57:2f:e1:7d:45:45:
         fd:70:57:07:cd:e7:57:8a:17:5b:fd:1f:66:67:59:d8:90:31:
         2c:c8:1d:ab:f5:01:e5:54:9d:b9:6b:4d:4a:69:ae:4b:32:ca:
         21:56:c9:8a:42:84:d6:80:91:5a:63:32:6d:be:13:27:9d:e4:
         80:6b:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:24 2025 by rpki-client