Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa
File:                     3d28518e-839d-322d-a84a-5b6911c0c511.roa (raw, json)
Hash identifier:          o6ULBmAetEfaaVKUGAqtC5j5sNpnch3OHJ/DFa5bu3w=
Subject key identifier:   09:59:85:99:04:33:72:68:25:E2:1E:F8:92:9F:61:83:FF:06:72:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA671CE1D529435DD3FC8F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396739
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:71:ce:1d:52:94:35:dd:3f:c8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=bfc73c5f-bda9-4333-bc23-a40c32487335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:37:f1:2a:7b:57:31:bf:26:da:52:ab:9a:
                    ca:bd:84:9c:5b:fb:79:64:a7:d2:36:dd:40:1c:ee:
                    76:00:1f:07:0c:8d:0e:7f:55:52:5e:22:a1:ae:b8:
                    1a:0c:d2:86:4d:f1:1e:fd:1d:8c:5a:bb:04:f5:74:
                    f3:50:3b:ef:32:60:05:cb:12:55:c6:4b:68:49:f3:
                    a9:c7:ef:83:c8:44:c4:c6:61:a7:57:22:a1:29:01:
                    81:37:6d:88:c6:25:d2:ff:d1:9a:10:78:69:39:5a:
                    31:7a:a8:07:5a:6a:0f:58:7e:e8:45:b5:06:57:00:
                    ee:7a:f6:a2:58:6f:94:c5:d5:04:b4:af:ff:9e:b3:
                    2a:40:c2:4d:7b:ef:a7:f1:49:0b:01:3b:23:ee:16:
                    f8:f8:b4:c4:70:72:17:37:2d:2a:42:ac:b4:28:ab:
                    bb:db:31:c2:c7:12:13:78:89:01:c0:5d:21:b2:27:
                    83:02:b9:c8:36:d5:1e:73:ee:b0:dd:ca:a1:7c:2c:
                    88:b7:4d:6a:f4:40:ac:c8:7a:19:60:82:69:f9:36:
                    41:5d:99:b7:85:57:ae:7e:80:90:0e:1e:ad:e4:02:
                    f5:aa:b5:8a:a6:ac:ff:76:99:ac:7a:9e:2a:a0:41:
                    06:d7:b1:7d:25:9a:9e:f8:d2:c9:3f:84:cf:4c:cf:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:85:99:04:33:72:68:25:E2:1E:F8:92:9F:61:83:FF:06:72:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:ab:d1:58:08:0f:2d:59:53:a4:de:e5:2e:d7:0f:76:a6:
         4c:08:fb:76:4a:27:d5:68:47:62:dc:25:0a:3b:59:7b:7e:cb:
         5f:88:8b:75:c7:f2:0f:8c:ac:c2:fa:12:2f:cc:a5:eb:0d:db:
         99:bb:ba:1a:96:de:d4:cf:90:fd:7f:b1:57:ef:67:b7:64:e4:
         03:40:7e:9e:2e:2e:49:c1:2d:56:55:50:3b:78:cd:45:a5:96:
         f1:a6:bb:df:69:35:fb:91:d1:88:e0:43:33:3f:8c:3f:66:7d:
         80:76:f1:54:21:ad:c5:5c:d9:92:d9:aa:7d:03:97:fb:07:7e:
         83:4f:8d:41:01:28:db:ba:b6:7b:ae:a5:18:c4:60:72:b4:b4:
         4d:2d:f3:60:03:87:e4:a7:9f:49:e5:e4:b6:cd:62:8e:f8:81:
         1a:f5:e0:79:85:ef:66:74:d7:7f:aa:92:15:fd:5f:b1:0e:44:
         76:a8:77:53:cf:22:a6:22:68:1c:9c:d6:49:50:82:75:00:bc:
         44:77:fc:a5:6b:92:59:4d:7b:53:6b:f5:3e:46:9e:be:2d:96:
         79:34:ee:1e:77:e6:73:ae:39:49:40:a0:d1:d8:f6:40:72:46:
         ec:c4:ac:71:c5:ab:a6:c8:96:cb:c6:09:4e:35:9e:2a:ab:bb:
         89:ad:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:33 2025 by rpki-client