Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bb0779-16c5-30a8-9f63-596c5dfcd7d5.roa
File:                     28bb0779-16c5-30a8-9f63-596c5dfcd7d5.roa (raw, json)
Hash identifier:          rdlfSfXnio2kni3+SPWyLg0wiYx7no2gg/3FyKElwyg=
Subject key identifier:   30:56:BA:DD:2A:58:E6:21:9D:D8:CC:2A:D8:D9:0C:96:BE:28:28:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC193E578AF5F5D1AFD3A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bb0779-16c5-30a8-9f63-596c5dfcd7d5.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:93:e5:78:af:5f:5d:1a:fd:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=2be19d56-e43f-4944-8da9-cb43db5c3454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:95:cd:ea:a2:88:ce:36:d8:07:02:a8:5f:3e:
                    07:12:a2:f5:d0:58:7b:18:de:ba:a0:fb:1b:49:ad:
                    e6:f3:69:47:11:2c:ea:10:61:40:60:11:f7:df:eb:
                    1a:77:79:84:d4:b6:1a:3d:26:9e:bf:7b:f8:73:cf:
                    99:b2:1c:aa:28:62:af:31:1a:a4:3d:e5:24:eb:e5:
                    ad:af:e6:7e:fc:72:2e:60:66:ce:80:67:87:7e:31:
                    e7:79:c5:ed:4d:b1:7e:0c:04:ad:55:e1:1a:2a:4d:
                    55:43:3b:c5:9e:69:a5:73:9a:88:0d:76:9e:18:fe:
                    df:16:f8:20:fd:29:2a:8e:b4:50:ec:7b:a1:58:7a:
                    b0:c9:6c:8b:08:3a:78:25:7d:b3:b0:d3:5a:87:5b:
                    df:75:c3:8c:1b:4d:1c:30:22:ff:60:8b:1f:55:b9:
                    48:dd:a0:44:0b:d5:08:70:77:87:7f:e6:71:20:43:
                    27:ca:aa:76:85:cb:95:64:a0:ab:bb:60:da:22:68:
                    06:5d:2c:3f:db:9a:d7:ad:8a:2b:07:70:8d:84:a0:
                    cc:fb:14:c2:9e:08:77:49:0a:84:9c:48:c3:26:fa:
                    88:eb:c0:68:d9:f2:89:0e:8f:d6:f0:12:f3:0c:a3:
                    92:66:0e:eb:58:98:63:18:97:9e:32:31:43:2a:a9:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:BA:DD:2A:58:E6:21:9D:D8:CC:2A:D8:D9:0C:96:BE:28:28:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bb0779-16c5-30a8-9f63-596c5dfcd7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:b1:23:c1:41:d6:04:ba:b3:99:bc:fa:1b:2b:e9:ed:88:
         15:59:dc:be:08:78:e9:c5:dc:2a:db:07:fc:5c:b3:7c:4f:e8:
         37:b3:44:34:13:a3:9f:67:4f:ce:b8:d6:30:a7:d8:7e:59:e0:
         51:4c:b3:d9:0e:04:3e:da:82:2c:30:d1:dd:1c:d5:6c:ad:3a:
         e0:b5:27:4f:9d:f3:84:4d:da:1b:71:d4:30:66:22:f0:a7:6f:
         bc:73:d0:45:5b:0a:18:b9:c5:e7:d1:68:c7:eb:5b:ce:77:b0:
         f1:ba:27:f5:0f:1b:7b:98:27:f2:1d:81:fe:02:16:ed:8c:69:
         7b:5a:5d:e5:8f:f9:fb:fb:2c:41:b5:3f:aa:d3:64:72:18:d1:
         35:19:be:aa:fa:ea:af:12:41:32:33:58:01:60:3b:64:57:6b:
         52:be:5f:55:f9:e2:cd:f4:3f:42:31:25:a4:5d:e2:8f:14:49:
         6e:36:39:30:43:bd:04:df:ae:f8:48:42:b1:ed:e6:72:3f:26:
         66:74:7c:3d:86:43:90:a0:03:0f:10:a6:3a:21:55:1d:92:af:
         bd:8c:85:6b:56:39:a0:73:73:0e:73:f2:ab:ea:cb:d5:8b:ee:
         89:6f:a2:74:13:72:cc:62:23:d8:6c:1b:33:33:9d:14:c1:0b:
         ac:64:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:18 2025 by rpki-client