Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41806d73-8c6f-3ce1-a372-91ab7a2b9d4f.roa
File:                     41806d73-8c6f-3ce1-a372-91ab7a2b9d4f.roa (raw, json)
Hash identifier:          S/C6PPGwqbP6yLftDo3+Y5Vm2WgrtUvjo/TPSntjdxQ=
Subject key identifier:   F6:94:1A:67:73:9B:63:72:9F:42:51:65:CE:B2:72:D5:CC:34:C0:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D070FC71AC6511AD0900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41806d73-8c6f-3ce1-a372-91ab7a2b9d4f.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396616
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d0:70:fc:71:ac:65:11:ad:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=4885fc33-a902-4278-9aeb-7b111b484446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b7:ab:6d:81:6a:55:88:51:cb:9b:ac:d8:59:
                    8b:f3:1e:10:e5:6b:bb:66:04:0e:be:e9:3f:1d:85:
                    09:ea:76:3d:a8:cd:09:c1:96:f2:59:1d:bf:db:6b:
                    23:2c:82:e9:a5:f7:07:eb:a5:4b:0d:97:db:9d:f8:
                    92:8f:81:47:92:b8:59:77:61:6b:3d:04:b2:5f:95:
                    18:cf:96:40:29:93:a0:23:c2:63:fb:e6:a9:af:3a:
                    cc:25:dc:53:99:64:a8:3e:0b:2f:61:39:66:e8:18:
                    0a:4f:dc:e7:4e:04:50:d4:88:d2:d6:a1:0e:be:03:
                    a8:c7:f1:ea:bd:99:96:7d:95:8e:28:a0:03:61:3d:
                    bf:78:ba:7d:5c:e5:25:3a:9a:a0:3d:c2:ad:9a:a7:
                    c2:0a:ab:a0:a6:d8:d7:a3:5b:a4:37:08:5b:2a:3a:
                    58:ee:9c:55:8b:aa:62:68:cc:30:00:99:6f:66:31:
                    b2:7f:43:76:a3:de:40:97:11:71:92:df:f3:9a:d9:
                    b6:45:e9:62:80:3a:f4:25:f8:f8:04:f4:cc:00:95:
                    36:5a:3f:86:04:3d:50:d6:e2:63:d6:a5:bc:68:f7:
                    a0:fc:d8:a3:cb:9d:bb:32:16:0d:36:2d:8a:18:3e:
                    6f:72:0b:25:d2:ce:6a:ea:07:b0:27:35:33:79:e1:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:1A:67:73:9B:63:72:9F:42:51:65:CE:B2:72:D5:CC:34:C0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41806d73-8c6f-3ce1-a372-91ab7a2b9d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:3f:4a:8d:db:b7:45:04:8e:d7:86:bc:f4:15:0c:af:71:
         7b:2b:f9:6a:01:a4:37:28:32:a5:d6:cc:bc:32:54:31:3e:69:
         3d:fb:01:68:50:0c:f7:b9:e0:a7:52:9b:4a:5d:4b:08:ae:7a:
         7c:5d:c6:fc:f0:83:23:fa:e7:c4:9d:9d:91:35:c5:6c:e1:0f:
         a2:01:83:65:d3:cf:48:95:fd:7b:90:70:9e:34:8b:b8:e1:f6:
         1e:8c:f3:1d:3e:52:71:45:32:29:e2:8d:79:fb:29:37:72:32:
         ce:9d:31:9d:02:9a:72:06:e7:65:cd:47:1f:a5:2e:0a:d1:84:
         a8:61:09:8f:5f:3c:af:3f:1d:6b:48:91:8d:88:b1:46:4b:7c:
         c2:2c:41:b9:b5:9d:3a:e8:d3:d4:b4:f4:1e:8e:e7:3f:c8:d7:
         8b:44:b7:92:18:04:88:64:01:a5:e3:96:c9:0f:01:1c:0b:f1:
         5d:81:24:eb:e1:2e:a6:76:4b:7a:f7:c4:e5:33:32:e4:44:6d:
         7d:c7:d3:fd:5d:a5:6a:ee:e6:41:0f:a5:8a:40:bc:85:b0:12:
         e8:65:b4:83:04:c9:cd:e8:ad:14:55:47:c3:23:c0:8a:55:b7:
         e5:72:ec:33:8f:29:d3:5e:23:d4:20:24:45:42:60:c6:36:16:
         18:8f:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:37 2025 by rpki-client