Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa
File:                     395070d7-7c1d-31e6-86b7-6c9e71756816.roa (raw, json)
Hash identifier:          L/OKt7HmqkwuDzZyB4hALXNlz4+4e6msC0ZuGIshJCw=
Subject key identifier:   C1:04:AF:6C:3E:AB:61:F6:52:B7:66:01:FE:EE:A8:86:D8:6B:52:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DB6FEF558283558DE8E9140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     396544
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:fe:f5:58:28:35:58:de:8e:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=56941957-5d3c-4d94-9a0a-d36ec65b6150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:70:66:0a:dd:00:03:8f:60:d3:18:df:6a:
                    8b:75:04:64:4d:28:29:6e:86:12:52:ab:62:e9:dc:
                    cc:1b:f9:73:87:cc:ed:17:7e:52:6b:e2:bf:a8:da:
                    ca:35:f1:34:f4:3e:6f:8f:e3:48:d3:24:2f:ef:50:
                    df:86:e2:c7:73:2a:7d:ac:08:e4:28:b0:d4:91:07:
                    f6:db:b1:70:7a:6c:84:23:83:68:58:ae:e0:d8:1e:
                    c3:1c:1f:03:9a:cd:b6:24:70:cc:64:a4:82:01:ec:
                    06:03:ae:da:ee:fd:bd:17:49:36:b8:03:4d:f3:9e:
                    ae:2d:39:28:6b:dd:b1:9f:e7:83:76:8f:fb:ba:94:
                    56:e4:c0:1d:8d:10:53:1d:e9:3c:04:75:e3:04:1e:
                    fe:98:cb:7b:42:4c:b3:85:84:54:9b:76:5e:12:7d:
                    1c:8f:bf:bc:41:44:7c:af:c4:a4:37:84:54:84:43:
                    97:cc:7e:93:4a:0d:27:3e:1d:1f:1d:5a:90:71:e4:
                    b0:11:8a:71:e1:dc:94:36:db:17:bb:06:f9:a9:a0:
                    93:a3:91:d7:85:df:74:1e:bb:58:93:18:f1:17:ad:
                    10:d8:38:a7:20:e8:c3:cf:bf:a9:53:34:9b:e8:29:
                    eb:64:1f:99:9c:95:de:2e:a3:49:03:66:96:46:58:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:AF:6C:3E:AB:61:F6:52:B7:66:01:FE:EE:A8:86:D8:6B:52:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:ba:c4:f2:86:32:b7:df:27:a4:80:75:d4:a7:80:8f:d4:
         38:6f:93:34:85:b5:f2:ab:ab:0e:d5:68:99:dc:01:4a:7f:7a:
         43:50:3d:f4:8f:ae:72:de:dc:95:94:2f:8b:8a:fa:79:32:db:
         88:88:f8:db:bd:5d:82:2f:46:99:ea:97:ab:73:1a:76:d9:00:
         96:f6:4d:f2:7a:91:7f:9b:61:c2:c2:0c:3f:63:d7:7e:12:58:
         a4:81:26:8d:67:28:35:66:f7:06:49:05:57:87:f5:b6:db:d0:
         52:64:e8:02:59:41:78:f2:e7:24:67:15:d9:90:b0:2d:05:28:
         27:95:a6:bd:e6:60:81:e7:63:a6:1c:9d:ef:be:77:34:b9:2b:
         8b:58:5d:82:1e:71:cf:1b:a2:cb:81:cc:2a:ee:3a:32:0f:eb:
         25:c4:81:0e:58:70:43:f4:ea:29:1a:a2:74:b4:0c:f5:8a:06:
         50:f3:f2:d2:bb:09:8d:87:76:a7:6c:65:6b:5e:60:95:80:d0:
         e8:9e:db:ce:a5:15:26:46:1d:67:45:4c:a5:1c:06:1c:03:f2:
         15:92:1b:d7:c9:36:77:d7:00:01:d8:fd:c0:da:46:6d:ab:65:
         73:d2:c6:ce:8e:84:8f:69:a4:ff:b3:af:d9:99:86:b0:99:ac:
         b9:33:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:28 2025 by rpki-client