Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/048fcaa2-1ba4-3ace-bc34-5386626d9d6a.roa
File:                     048fcaa2-1ba4-3ace-bc34-5386626d9d6a.roa (raw, json)
Hash identifier:          M7vBBw9m5ArXT4xNjs85i0zPN46/DSuZLPaj9IBpqnA=
Subject key identifier:   EB:9E:06:93:20:3C:3E:3C:20:03:56:0D:A8:68:0C:11:21:CA:CA:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DBA268FDCAC0D8D1AF8AC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/048fcaa2-1ba4-3ace-bc34-5386626d9d6a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     396564
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:26:8f:dc:ac:0d:8d:1a:f8:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b3454dd6-59fb-4cdb-86a8-765e9ca68eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:56:62:5f:17:b4:23:c0:bd:98:7c:d2:b8:
                    1f:00:32:be:d1:5f:09:d0:d6:f0:16:45:52:08:63:
                    49:bb:e0:ed:1b:db:3a:2a:62:89:4e:38:58:da:bd:
                    14:b9:a6:88:e0:8e:e0:96:26:e5:c9:15:28:78:ed:
                    b6:a9:ed:25:01:fc:f1:2e:ac:34:5f:17:e3:f8:52:
                    a0:e2:c2:aa:8e:23:65:d2:0c:1a:96:72:f0:d2:0d:
                    85:53:54:5c:fe:ba:95:e4:af:a2:6e:3c:35:7a:d7:
                    46:09:63:4d:dc:33:c6:a2:20:c7:f7:45:dd:00:92:
                    f9:5c:1c:ac:6b:db:70:8b:8f:a8:d9:e1:3b:22:50:
                    99:7c:87:6b:a6:0d:e2:68:55:01:67:05:6c:cc:e5:
                    24:b4:24:69:ff:67:99:75:97:c0:0b:57:ef:9c:8b:
                    97:01:3c:19:1b:c0:7a:1b:4e:5a:03:fc:71:69:9e:
                    e5:e5:79:66:03:3c:fe:52:00:5c:4b:d1:71:e3:ca:
                    bb:09:b3:98:d9:4f:e9:52:72:e1:17:7a:0d:fb:ce:
                    da:cf:ff:22:37:8f:3d:25:c0:31:e3:d8:75:c9:c3:
                    73:1d:90:d4:a9:87:6d:b6:ad:bb:b4:67:94:5a:81:
                    c4:cd:eb:ac:bd:3f:46:e4:02:7d:0b:06:3c:df:61:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9E:06:93:20:3C:3E:3C:20:03:56:0D:A8:68:0C:11:21:CA:CA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/048fcaa2-1ba4-3ace-bc34-5386626d9d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:9f:19:b5:ea:18:3f:fe:df:8f:6e:79:bb:a3:7c:04:d9:
         ec:a9:7c:74:1c:6f:38:ad:ab:3a:41:26:fa:e3:67:07:a9:16:
         40:ad:aa:56:d1:42:c1:c7:61:b5:fa:2c:65:82:93:06:96:a5:
         96:90:a6:70:36:be:b7:4a:2d:68:7e:46:c3:e8:66:4f:de:aa:
         1c:cb:62:55:3c:5c:f4:59:0b:0c:41:34:da:46:03:6d:f0:c2:
         ab:6b:24:e0:67:4d:a8:ac:08:d3:2f:63:24:26:2a:8f:bb:2d:
         a1:f2:38:f6:7b:ba:ba:7d:61:cc:86:71:8b:45:02:7e:4f:b1:
         ba:25:ff:7a:ac:64:65:62:f9:84:46:54:7d:7b:dc:c9:c7:d6:
         25:bd:37:4a:c7:de:22:38:8c:b0:7e:e1:a3:20:04:10:c9:67:
         df:32:df:6d:db:cc:5c:b9:98:f6:c9:85:0d:6b:9d:6e:f3:22:
         3a:c1:c6:1d:70:0e:42:f0:7b:04:d9:c5:aa:08:6d:0a:94:be:
         34:4c:3b:04:58:7e:5f:d0:52:55:35:eb:fd:34:8a:37:6b:15:
         e8:a2:c8:4a:51:8d:45:00:0d:65:b3:e6:73:0e:46:bb:e1:4c:
         b6:ad:8e:fb:43:5b:6a:47:c6:a3:9f:c7:54:e4:54:33:c0:fb:
         ed:31:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:44 2025 by rpki-client