Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa
File:                     4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa (raw, json)
Hash identifier:          2OK0gca0BSKUQuQvRBai3sWWY6NRj96w9RVuE4gRxNA=
Subject key identifier:   2D:27:CB:2A:EB:C9:91:7C:7D:9F:7C:A8:B7:7D:C9:83:27:AA:2D:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B7ABB407B15FCBD3C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396588
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b7:ab:b4:07:b1:5f:cb:d3:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=4fe1acc1-66d1-4ad3-89cd-a3348c8436a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:e4:ba:0d:e5:9b:13:47:24:f1:ea:5a:57:
                    7b:de:4e:35:d1:51:d7:14:01:0a:c2:2f:00:2c:e5:
                    1b:e5:c6:9a:f3:43:c7:bc:96:20:45:a6:7f:41:82:
                    82:f4:4f:46:f9:7e:d9:7e:68:f4:d5:7c:d1:a0:c5:
                    ea:a2:84:b5:fd:bf:ca:02:14:e4:bd:35:12:d6:3c:
                    73:dc:42:7c:f3:fa:1f:bb:75:58:92:70:b7:78:9b:
                    52:b7:26:66:64:28:e5:40:83:ca:5e:6c:2f:32:e0:
                    57:8e:82:0f:75:e6:0b:16:45:04:61:9c:99:89:3b:
                    10:15:bd:b0:73:d9:c5:74:21:c6:fb:16:d0:b1:a5:
                    87:7d:01:25:b3:6b:db:06:c5:62:e3:58:72:42:b4:
                    bb:a4:b0:f0:7f:aa:49:78:d8:c9:b2:16:2a:69:53:
                    12:bf:10:4b:50:8e:18:07:b8:46:2a:7d:f8:32:fc:
                    8c:b2:9e:ae:66:2d:dc:14:7e:32:54:6c:fb:01:d7:
                    75:01:33:23:9f:36:3a:f8:27:dd:e0:69:e5:dd:7e:
                    dd:62:fa:12:5c:5d:4d:b2:ae:fb:04:9e:4e:1a:a6:
                    e2:d8:99:af:7f:27:f1:77:48:de:84:db:54:87:de:
                    c5:cb:c1:bd:b0:02:cf:ab:b8:32:73:04:d5:27:15:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:CB:2A:EB:C9:91:7C:7D:9F:7C:A8:B7:7D:C9:83:27:AA:2D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:02:43:82:82:84:e2:c3:37:d8:ab:ab:f9:b8:09:41:19:
         21:cf:56:23:d6:34:00:ab:c4:73:16:02:ad:e7:d9:14:d3:0a:
         3d:57:f6:cc:ea:66:75:9e:8e:e5:eb:b1:43:8a:1c:44:e7:1d:
         8f:18:ff:66:d6:0c:d4:5f:19:e7:cf:78:81:69:27:d2:e1:43:
         7f:62:f4:b3:5f:58:ab:80:47:e7:9f:ef:9e:11:6d:bd:2c:54:
         8d:67:ca:c1:de:71:f3:62:5c:81:9f:20:33:42:42:e7:8e:e4:
         3d:9b:ca:3e:a5:02:f0:1f:fe:f1:15:fd:9c:68:89:c3:52:eb:
         bc:e1:e0:7f:05:06:b3:c5:d5:b3:1f:a5:4b:8e:e4:94:2d:eb:
         ef:b5:6a:b9:05:64:fe:bd:b4:e5:76:40:36:41:d7:18:e2:09:
         3c:be:3c:74:6c:84:1d:ef:23:8e:6b:92:2e:6c:ff:d5:51:26:
         0a:9e:69:2b:8c:69:36:47:36:22:28:34:0d:99:36:02:5b:8c:
         7b:0c:c2:7a:64:4a:be:03:42:fa:c7:fe:e4:3e:d8:8a:03:da:
         a7:6f:cc:ed:67:69:d2:b5:9f:42:c1:b9:ec:7c:e1:f7:e5:63:
         f7:b0:4e:1a:be:76:d6:69:1a:9d:24:58:82:93:4d:9d:36:1b:
         80:b4:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:06 2025 by rpki-client