Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/271ee251-b22f-3a68-b4eb-04e00e8e4c70.roa
File:                     271ee251-b22f-3a68-b4eb-04e00e8e4c70.roa (raw, json)
Hash identifier:          cJVr8Hx/3cXw10O320S2Obz0PsHbnBERmpcb/Dg6Nd4=
Subject key identifier:   5E:8F:CA:36:D9:29:75:0B:AE:19:28:98:BE:FE:F1:C5:6C:4B:91:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B663210C8D874822CCD487380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/271ee251-b22f-3a68-b4eb-04e00e8e4c70.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     20362
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:10:c8:d8:74:82:2c:cd:48:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=bc9d6c52-78cb-4e12-ab89-c2692c339c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:87:df:31:86:f2:33:48:ee:46:5e:54:47:
                    6c:3e:eb:64:ad:b0:b6:cc:25:48:20:45:7a:4b:90:
                    0f:56:bf:ce:6d:3e:04:d7:50:8d:b2:6f:8d:d8:1b:
                    55:86:e6:f8:4f:14:c7:4a:5f:88:fe:47:89:62:ee:
                    96:f9:c9:eb:b1:e7:da:44:d7:e8:b9:34:46:e1:f7:
                    99:da:6b:f5:58:a4:18:81:60:6f:73:3c:14:8d:29:
                    69:54:df:8a:79:6d:ac:0e:76:e2:e3:0c:bc:ae:89:
                    e2:37:cc:b2:de:31:0d:4e:8b:a7:c2:bb:ab:73:c8:
                    53:c8:3a:61:d5:b0:e2:b4:87:c9:2c:54:65:55:76:
                    d2:02:89:fe:f9:c4:8a:67:b0:ca:13:b3:c5:3f:2e:
                    81:63:ea:b1:0d:f7:bd:77:a2:40:c9:13:e8:e3:d6:
                    66:31:9c:90:a8:8f:f1:f5:51:a5:12:33:70:e1:29:
                    83:3d:63:85:a5:55:e6:22:4d:cd:7c:91:81:46:84:
                    27:39:26:30:ce:a9:b5:b4:e7:4e:4a:c0:5a:3a:de:
                    15:66:ec:d0:e9:c3:6c:63:cb:6c:fe:8e:f4:6b:16:
                    d3:d9:ac:e3:48:56:e3:66:2e:79:35:cb:63:b5:aa:
                    48:30:5c:d5:b4:c1:2d:4e:dc:10:c2:da:69:b7:38:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:CA:36:D9:29:75:0B:AE:19:28:98:BE:FE:F1:C5:6C:4B:91:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/271ee251-b22f-3a68-b4eb-04e00e8e4c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b5:9a:0c:97:36:82:a5:bc:cf:c8:75:20:c7:ff:64:31:12:
         b3:a3:59:8e:2f:88:4b:72:2e:92:25:bb:87:0e:ce:aa:9c:5a:
         68:1c:68:b8:f1:87:da:ee:c0:e3:49:82:2b:70:4f:b6:2f:b6:
         a5:45:d2:65:94:dd:46:db:c5:78:e6:a5:1d:1a:bf:b6:30:23:
         7f:bb:05:40:d7:db:b3:2c:06:6b:be:70:13:95:1f:4c:65:35:
         da:3a:4e:ae:c5:0b:01:83:7c:43:31:0c:ec:31:41:44:4a:5a:
         f7:32:5f:e9:d4:ed:7d:4a:3c:10:77:76:e2:0f:80:2a:fb:c1:
         3c:31:6f:09:51:bb:2f:cd:36:9f:16:0b:69:ab:7d:be:7a:b4:
         c4:02:5d:f9:98:ee:d9:c3:8a:71:36:7b:8f:21:d1:f3:cd:22:
         4c:db:27:4f:ab:3e:b4:f6:6b:ab:70:0e:e8:a3:0b:9f:3b:84:
         da:ea:de:96:97:d4:6c:fc:a8:ae:ee:bb:69:58:51:dd:58:b3:
         43:49:1d:d1:fb:db:a7:61:9c:62:3e:cb:af:f6:e5:57:68:93:
         c4:4e:27:86:c3:38:94:2b:1d:bb:1b:cd:6b:1c:69:0f:68:66:
         9c:3b:fd:81:4b:4a:99:0e:69:0a:f2:41:35:a7:de:6c:ac:98:
         db:e8:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:45 2025 by rpki-client