Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
File:                     1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa (raw, json)
Hash identifier:          pzSWLiXgt4Uve3IprzMjdh8jSQqc8QDy9eS2InqVKjA=
Subject key identifier:   97:95:D7:24:43:6D:47:22:53:16:E0:5E:E0:4F:33:1C:25:1B:BA:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF25695A3ACCDC8CFF473A230
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     396586
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:95:a3:ac:cd:c8:cf:f4:73:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=069893cb-45d7-4d02-b79d-4ace274f3344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:f5:99:c1:c4:14:d3:88:a8:9c:e6:a2:4d:
                    2c:14:68:5e:5e:18:4c:ef:83:4c:0c:b6:c1:8c:41:
                    cf:a8:56:52:20:ba:67:45:44:15:90:63:d7:90:b8:
                    ff:9a:63:94:0e:59:c9:2d:74:e1:ea:27:c5:41:3c:
                    5b:9a:76:97:1f:aa:2c:60:23:0a:d0:5a:3f:c5:bb:
                    d5:b3:b2:6d:95:e3:68:01:55:b7:e3:0c:3f:26:75:
                    27:b6:b2:05:ee:a3:45:89:52:82:0a:c3:49:f0:c2:
                    81:07:d2:81:58:57:7f:98:c8:d2:cd:0f:46:76:1a:
                    c7:04:c4:08:65:39:bf:80:5a:6d:31:27:9e:f3:ad:
                    2b:cd:1f:04:83:7b:fe:a4:54:23:66:e8:47:7a:0e:
                    f0:cc:a8:a3:79:81:3c:f9:e1:ad:cd:dc:1c:8e:59:
                    91:e7:2e:09:b0:f2:2b:70:90:e6:83:39:4c:be:c1:
                    98:bf:86:e3:f1:1a:fe:07:78:ae:d5:22:f8:ba:54:
                    79:1e:62:3f:72:cf:ff:5a:6e:3f:97:d2:a9:ae:dc:
                    80:8f:3a:e0:6c:77:da:d1:c4:2f:22:50:bf:f4:d8:
                    ec:bb:79:1f:36:87:fb:e1:72:57:06:55:73:ca:e8:
                    db:50:4a:27:2a:a7:29:0b:09:fa:cf:8c:ac:bd:4a:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:95:D7:24:43:6D:47:22:53:16:E0:5E:E0:4F:33:1C:25:1B:BA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:1b:ee:55:7e:e2:22:c1:12:e1:2a:d2:d4:6c:50:10:77:
         fb:8b:92:b9:21:3b:30:a1:12:36:21:5e:72:6e:78:08:d8:0c:
         12:55:a8:f1:19:d3:3a:c2:33:11:35:ff:ae:3f:ea:38:49:bd:
         e5:51:ee:0b:e7:98:0c:f1:37:41:1f:05:3d:a6:0a:06:9f:06:
         0f:fb:76:d0:da:bd:d1:2c:e2:1a:06:29:c4:75:a6:51:3f:95:
         91:cc:8e:af:dc:f8:5d:90:0d:e8:74:18:43:09:19:77:8f:42:
         8f:ae:d3:44:99:52:1c:e5:49:e6:a3:55:5f:f6:35:d5:d2:8f:
         77:19:91:2c:43:56:34:b3:c8:f6:e6:6c:95:35:59:4d:78:06:
         e0:e6:e3:04:96:eb:cf:e1:6a:13:84:8e:5d:f9:47:64:b1:96:
         3c:ec:40:d8:4d:00:b9:47:66:7e:7e:33:ac:9e:c7:48:71:7b:
         c7:81:94:a6:c1:d5:e8:32:36:20:35:f4:6e:23:b9:1f:8f:4f:
         26:1c:84:18:01:df:88:79:30:2c:d0:f1:c6:f1:77:63:9e:85:
         06:c7:6c:61:c6:82:04:4e:66:1d:ec:74:67:42:40:d8:7d:06:
         82:8f:f1:90:6b:ba:be:47:34:09:4a:8f:b8:79:da:b2:b4:2b:
         1a:11:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:08 2025 by rpki-client