Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457061d3-38f1-3f0d-a802-a6628c125a8d.roa
File:                     457061d3-38f1-3f0d-a802-a6628c125a8d.roa (raw, json)
Hash identifier:          dqYMv8yRXG/OZ2FAOBHmqYD+sUMKaSs2qGzghVkYsho=
Subject key identifier:   32:F3:32:83:C2:68:05:15:3B:4A:C3:5C:D6:F0:7E:93:5A:39:8F:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC17F1267133FC26383B488
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457061d3-38f1-3f0d-a802-a6628c125a8d.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396583
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:7f:12:67:13:3f:c2:63:83:b4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=7039f7fa-fe66-4fd7-84f2-8acaae24c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:3c:6a:a7:b9:19:c3:c8:80:db:6f:2d:11:
                    b8:af:d6:e4:99:a0:47:d4:a6:77:47:18:fe:72:c9:
                    fb:fd:1a:57:34:45:82:2e:67:a5:4b:a6:03:a0:48:
                    79:12:af:01:60:5b:07:b1:c1:df:c1:7a:8a:46:8f:
                    ad:83:48:87:14:1c:d9:70:1d:51:b5:b1:4c:89:07:
                    14:ba:3d:90:0b:ca:f4:7f:0d:65:c7:a9:75:f1:7c:
                    ca:46:08:60:ae:77:e9:15:c4:dd:54:8c:d3:c4:a4:
                    ab:15:d9:c6:ef:87:4b:4b:19:d3:57:d9:0e:18:ef:
                    94:c8:ae:59:41:50:86:84:3b:ee:1d:b4:5e:c7:3f:
                    81:09:ba:96:43:df:0c:fa:28:55:e8:ef:7b:93:15:
                    94:da:0e:a7:6f:96:88:41:2b:ea:00:9e:6e:4b:1e:
                    25:f5:82:5a:cc:51:2c:41:31:c5:fd:16:5c:9f:db:
                    5a:ff:c9:4f:39:b2:e2:c9:73:9d:06:c3:f4:dd:6e:
                    93:7f:dd:3c:ca:df:ff:53:74:51:c2:9b:00:4e:25:
                    b1:8f:69:ab:d3:38:14:fa:07:75:37:03:c6:36:15:
                    cc:5a:88:5e:80:e4:6e:94:9f:dc:dd:d7:24:43:a5:
                    8e:0f:5b:24:df:88:d5:46:82:64:47:2f:17:9e:bf:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:32:83:C2:68:05:15:3B:4A:C3:5C:D6:F0:7E:93:5A:39:8F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457061d3-38f1-3f0d-a802-a6628c125a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:0c:a4:b7:ba:0a:4c:b3:38:6b:71:01:d7:92:22:ab:d3:
         39:c7:54:03:6f:28:12:2d:13:ba:e5:89:9e:6f:8b:1d:42:b4:
         2a:12:b5:80:89:e3:7b:ab:8c:29:25:bc:02:cb:73:67:6e:ec:
         ac:53:0c:c0:d3:ad:a9:35:99:90:8c:86:c0:0c:38:71:ce:8d:
         0f:be:18:84:55:82:42:41:e9:da:87:48:4a:cd:47:2e:3c:44:
         ad:6a:0f:cb:33:a3:ac:c0:e9:b4:0c:63:47:62:a3:f9:96:20:
         af:d9:df:6c:8e:53:7f:44:ae:83:00:67:dd:6b:99:0d:54:db:
         63:06:2f:a5:0f:cb:3b:06:b5:65:04:8f:1e:25:b6:a3:de:95:
         7d:d5:0e:d8:02:ab:c9:ff:ea:4f:e7:dc:1c:cf:ca:64:2a:6d:
         70:af:db:18:0b:0a:02:05:d8:0f:c4:03:16:0a:c3:f7:e9:74:
         d4:29:36:f2:9a:e1:53:fa:bb:0d:73:b0:12:54:2e:b6:4e:74:
         94:1c:62:85:8a:74:da:1f:3c:82:52:94:54:a0:07:3a:e1:72:
         70:45:51:f7:cc:61:a1:9b:10:c8:65:1b:cd:ee:4c:93:a1:13:
         65:b6:be:6e:6c:45:0c:15:4b:4b:a5:06:5e:f1:29:58:98:c9:
         c6:d0:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:57 2025 by rpki-client