Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0e3031-0158-36d5-a0f8-cecbc42804a1.roa
File:                     2b0e3031-0158-36d5-a0f8-cecbc42804a1.roa (raw, json)
Hash identifier:          2GvwwRUiXS6GJkf/hsHSa5jYiGZINY0cJQE2a9wk+uM=
Subject key identifier:   12:0D:26:00:13:77:2F:0F:10:A1:0E:E4:11:5A:03:0E:A3:F0:C3:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD0619ED7AE8672AF4300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0e3031-0158-36d5-a0f8-cecbc42804a1.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396544
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d0:61:9e:d7:ae:86:72:af:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=7adb47d3-149a-452d-bf72-1ae154a79f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:43:47:8d:17:7a:be:cf:55:4e:aa:c3:26:
                    22:2f:90:7a:49:06:5a:69:85:20:d0:51:79:48:a5:
                    0f:2d:4a:3f:0a:3a:05:a0:9e:d2:94:86:68:3a:12:
                    52:f3:87:7a:3a:c2:de:5d:1d:97:2a:44:6c:36:33:
                    5d:d9:40:c8:3b:6c:c8:1d:41:fc:cb:ca:0d:e9:eb:
                    6d:31:53:dc:78:66:a2:a9:f6:46:e3:1e:b4:68:f4:
                    2b:d1:cb:51:6f:31:1c:c3:0b:f4:bc:81:00:1f:af:
                    01:23:e2:b2:49:09:97:be:0e:c6:b9:32:f5:30:24:
                    01:4e:34:94:c0:0c:f4:e1:03:06:69:2a:c0:ac:1d:
                    32:4e:e3:0a:20:d0:cd:bc:26:0a:b9:54:ad:83:ea:
                    63:8e:cf:c1:25:4f:e6:c5:e8:f5:2a:b6:85:0f:83:
                    66:fb:20:42:2d:ff:34:b9:0b:e8:cf:8d:43:45:48:
                    19:f6:83:13:51:c8:fe:ee:1f:15:45:2e:14:a9:10:
                    84:cf:43:87:d4:34:d9:46:be:be:42:92:28:16:bc:
                    a8:2c:ca:3e:5e:a2:6b:9b:a0:52:23:fa:ae:cb:8f:
                    85:c9:9a:69:1d:72:ff:28:95:49:6a:d3:93:19:d1:
                    0e:02:87:6a:02:65:77:aa:57:ab:18:26:a1:b4:ce:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0D:26:00:13:77:2F:0F:10:A1:0E:E4:11:5A:03:0E:A3:F0:C3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0e3031-0158-36d5-a0f8-cecbc42804a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a0:fc:52:ac:b7:4c:69:1e:8f:0c:eb:98:b4:47:86:c2:7d:
         60:81:27:38:b1:14:5b:26:18:e0:e0:bd:16:95:3d:89:f4:30:
         34:d5:57:49:1c:b5:b3:c7:b9:49:a9:d3:25:c4:1e:00:53:9e:
         a5:c9:ed:a6:a3:3b:3a:6d:dd:6d:13:da:71:fa:bc:58:d3:ac:
         25:22:b8:ac:7f:08:36:68:b8:f3:25:6e:dd:49:48:2f:37:1d:
         ef:2b:5a:a2:a6:d8:26:21:1c:af:d0:08:89:96:95:37:c8:53:
         bf:fb:31:fc:0d:45:5e:ba:82:5b:d6:e6:f3:e3:ed:fb:21:e3:
         b0:fc:25:ef:fb:18:95:4e:15:91:c3:d5:6c:f2:19:51:66:cf:
         04:18:3f:f2:14:b2:69:56:d7:2c:54:0c:ce:e9:d9:d5:83:d5:
         c3:93:b2:90:2f:3b:76:af:73:b7:f3:07:4b:0f:55:65:33:af:
         e3:b9:20:51:f3:71:72:69:56:a8:06:44:1d:87:67:b1:25:59:
         dd:93:7a:c1:95:7b:d7:31:a6:3c:9e:7e:f6:c7:9d:71:2d:b5:
         34:dd:a7:2a:50:c5:70:bb:41:90:38:fc:e4:97:88:6f:f7:bf:
         55:3d:02:60:7e:36:d2:40:f1:b8:6b:4e:aa:0b:0a:3d:2b:5e:
         5b:54:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:25 2025 by rpki-client