Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09fed32b-d845-3bdf-a963-08e5d195d507.roa
File:                     09fed32b-d845-3bdf-a963-08e5d195d507.roa (raw, json)
Hash identifier:          LFouM5xE9eMSiqdYekX6zbGyrhWuI6lbvb3rci5Sx2A=
Subject key identifier:   6F:AE:E4:0B:EC:E0:DB:85:99:B4:DC:5D:AA:68:73:AD:FA:29:BD:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF2569690932021C8970250A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09fed32b-d845-3bdf-a963-08e5d195d507.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     396599
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:96:90:93:20:21:c8:97:02:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=c5781f5d-141b-4dda-88c6-6aaaf6b636c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:d0:9c:6b:7f:da:04:65:77:3d:4b:4a:38:
                    91:73:29:79:f4:23:f6:6a:ab:1c:4f:31:f9:5f:6f:
                    98:3b:a2:b3:5c:2e:c3:04:d8:dd:7a:cf:d4:1d:38:
                    73:62:79:f3:cd:93:5b:82:21:74:0a:e7:4d:e0:b8:
                    2b:c4:f7:32:1d:18:be:d1:b2:71:38:1c:1c:3f:2a:
                    c8:77:57:13:f2:ec:e2:2b:56:82:77:aa:22:6a:65:
                    0e:43:49:8f:e8:f5:a3:5f:db:d2:71:30:b0:e5:72:
                    c4:20:11:d5:ac:b3:e6:fe:24:76:2f:e7:82:07:b4:
                    09:a3:6d:5a:33:98:bc:ce:06:cb:06:7f:dd:1d:6e:
                    c9:93:2b:8f:53:a5:e4:14:b4:35:93:64:46:ba:78:
                    90:eb:28:d6:b9:a0:7c:51:55:49:98:18:30:2a:d3:
                    a3:fa:fc:c5:ed:c4:1c:52:79:8a:5d:81:10:e2:84:
                    28:eb:98:59:f4:f4:de:78:fc:70:bb:f5:cb:7f:51:
                    0f:d6:2e:3a:ee:c3:a5:b3:bf:3f:2c:4f:e4:25:d8:
                    45:8c:72:8c:7b:f7:a1:fc:ba:83:de:85:d2:92:3b:
                    fa:6b:43:93:15:10:3c:94:91:3c:cc:5e:0d:84:25:
                    07:4f:1a:74:27:29:22:8b:48:9f:f9:fc:f5:5c:81:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AE:E4:0B:EC:E0:DB:85:99:B4:DC:5D:AA:68:73:AD:FA:29:BD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09fed32b-d845-3bdf-a963-08e5d195d507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:04:82:c3:b4:ae:72:3a:10:bb:e6:70:0d:47:81:84:e7:
         1a:73:09:9f:b4:8b:8a:65:5a:8b:b1:57:03:76:62:a1:20:c5:
         34:43:5c:c5:18:df:1e:52:42:e4:f2:a2:36:e7:4b:fa:08:7c:
         30:a8:7d:07:a6:2f:85:db:64:00:8c:f7:a7:6a:fb:ff:06:e5:
         61:cc:60:2e:64:22:5a:20:6b:73:ea:04:92:29:4a:06:a9:11:
         3c:b0:ec:39:10:69:a2:2e:d8:f5:ea:ea:02:f7:a6:7c:3a:40:
         da:e2:ee:e1:ae:44:96:ae:d8:90:67:0a:b1:cf:c9:d1:81:4a:
         8d:79:4b:b1:f1:be:62:34:9b:29:6a:6d:e8:ea:53:8f:3e:a0:
         28:d9:09:c4:63:f0:0f:4b:5e:80:c7:41:95:ad:f8:8b:27:2c:
         96:c8:14:2a:a4:7c:40:8a:12:39:9d:ce:e1:9b:7f:cd:b5:3d:
         0a:e6:3d:be:9d:82:bf:1d:84:24:a9:d2:87:36:a7:0b:bc:ce:
         f4:11:f5:1d:e0:bd:a3:48:59:f8:29:c7:88:bb:98:b3:37:a6:
         7d:ff:81:da:2d:bd:ae:4d:88:3e:7a:e1:ea:85:e5:34:d6:93:
         78:0f:03:fd:7a:e9:e7:05:4e:4e:5a:69:26:5b:bc:ad:1f:65:
         2e:7d:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:24 2025 by rpki-client