Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
File:                     31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa (raw, json)
Hash identifier:          FuuuzJTTiKWAsZOmNynhWhZtHF4sdH5lvwV3puycV34=
Subject key identifier:   81:DD:BA:C7:A9:26:87:8B:48:4D:5B:70:AF:99:AA:62:22:01:B2:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA686365D44E8B5381B4D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396563
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:86:36:5d:44:e8:b5:38:1b:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=f71ff4b9-f582-4ac7-99c7-e3e969317b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:08:08:52:28:f2:14:99:f8:9b:ed:c6:90:
                    b2:fc:a2:04:05:43:0e:53:d2:e9:a8:8f:61:6b:90:
                    46:d3:08:33:1c:7e:41:14:01:b3:4a:59:04:ce:69:
                    79:61:03:7a:a7:71:8b:d5:5e:72:b3:a0:3e:37:78:
                    93:d8:b0:a1:a5:49:29:be:66:70:f4:54:e8:cb:00:
                    15:bb:8c:a7:4b:b2:07:39:d8:1d:46:80:0d:5b:7b:
                    a0:45:c5:3a:2b:a2:2f:d9:5e:bd:c5:65:d9:12:03:
                    83:0a:a9:68:06:a3:64:26:dd:82:1a:96:76:2a:54:
                    14:3a:47:46:23:63:4d:b7:69:84:91:fe:96:47:8e:
                    fb:4d:ca:d0:fa:25:f5:c2:fc:6c:5c:6f:c1:6f:c2:
                    37:11:d3:de:aa:a2:6e:aa:39:29:3d:f1:73:8a:a8:
                    98:da:e0:9b:2f:96:59:69:49:4a:a0:d2:df:02:5e:
                    d0:43:fc:ad:00:3f:6d:34:7b:c2:4e:86:52:e6:d3:
                    f9:95:a9:83:e3:03:a3:5a:8c:6d:36:f6:9d:af:df:
                    33:ef:af:fd:19:db:cb:93:b5:c7:a1:27:cb:cd:6e:
                    a1:bf:6e:2e:e3:b8:be:65:3b:28:e5:86:46:9c:78:
                    aa:55:05:10:19:19:fe:d0:54:ee:dd:22:9e:3b:59:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:BA:C7:A9:26:87:8B:48:4D:5B:70:AF:99:AA:62:22:01:B2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c7:45:15:91:fd:4a:ef:81:6d:36:c7:b1:56:5b:5b:3c:11:
         ce:4e:3f:7a:9b:29:2e:d8:18:59:2f:d9:be:70:88:62:55:b2:
         90:d5:2b:e8:08:bf:af:f5:91:ce:71:a9:90:71:56:39:68:bb:
         e4:cf:40:3d:d1:22:07:1e:ba:1f:b1:5f:c4:cf:f6:92:56:ec:
         98:a7:f0:ba:94:56:52:66:7b:a5:64:d7:1f:ab:49:b7:3c:d8:
         83:6e:fe:96:51:9d:de:53:83:28:57:37:29:e6:a9:12:89:54:
         77:f6:c3:74:14:28:bc:b9:40:bc:62:f6:89:6d:f5:54:a6:e6:
         d0:95:12:69:24:d9:f7:4b:0e:47:91:82:cc:01:af:07:af:01:
         6e:e4:24:18:e2:25:61:ba:1d:09:12:9b:da:8e:a4:cd:de:41:
         27:74:47:b9:59:8b:51:ce:ca:82:91:cb:68:9c:8e:9f:06:52:
         54:63:97:c9:e6:ae:b1:de:04:f8:24:cd:a4:12:97:60:89:01:
         b2:fb:5d:de:af:e3:87:f1:4c:c3:4c:2b:b4:f2:e1:38:0e:13:
         68:0f:7c:11:89:3b:18:38:9c:d2:52:74:03:bf:fa:d4:fc:5a:
         c4:99:9a:18:f4:df:77:cc:ec:b1:61:9f:0e:ef:be:b0:9a:5e:
         be:20:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:42 2025 by rpki-client