Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501a061c-bd48-332f-8f92-550cfc1181cc.roa
File:                     501a061c-bd48-332f-8f92-550cfc1181cc.roa (raw, json)
Hash identifier:          c14ewrvv3GbYhgfsClXXApNI4GGA2EGKk0wS0xUbw0k=
Subject key identifier:   EE:9E:AE:4B:57:1A:BD:2F:BB:2B:DD:BD:33:42:9C:2C:E0:B8:5F:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A78507391DBA8764B05E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501a061c-bd48-332f-8f92-550cfc1181cc.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     396600
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:85:07:39:1d:ba:87:64:b0:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d12f91c1-6a11-4a3b-9746-6806337a395b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:f3:17:a6:ff:d1:85:e6:3d:73:59:35:66:
                    51:9e:8a:60:ed:af:75:de:76:a3:b3:e5:c1:c9:c4:
                    81:4c:09:f3:79:be:ff:a3:26:15:78:55:d5:b3:02:
                    ca:94:51:bb:42:0b:e3:eb:2c:80:1c:73:30:8c:6f:
                    e8:82:55:1b:0c:8a:40:86:e4:17:6f:8b:9e:f4:ac:
                    61:1f:0a:1f:df:89:e9:11:5c:b2:fb:b8:fe:83:0d:
                    39:26:2e:4c:90:ec:fd:de:ba:f3:cd:62:f1:56:9a:
                    51:25:7f:31:31:28:fa:74:a4:d2:21:97:0e:06:91:
                    23:eb:b5:4d:05:da:6a:8c:e1:52:6b:9e:0c:e9:1a:
                    be:f4:95:a8:fb:c8:c6:6c:c0:d8:8c:0c:19:b0:6f:
                    3e:54:94:cf:36:7d:10:3f:a1:a6:84:1b:fd:2b:f9:
                    3d:1a:25:8f:3f:1a:f3:11:c4:56:da:ac:2a:d5:a2:
                    b3:ec:3e:7e:d5:f1:fd:0e:db:9b:77:48:1d:74:d3:
                    39:37:74:e0:6f:8a:ce:9d:5b:eb:4e:7e:59:08:75:
                    cc:57:ab:27:de:a1:b1:a4:b6:29:cb:1a:ee:84:78:
                    a5:2a:d0:1d:a6:94:50:41:f9:83:2e:31:42:06:27:
                    f1:ac:6a:90:3f:82:79:71:1a:4e:53:86:6d:9a:0b:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:AE:4B:57:1A:BD:2F:BB:2B:DD:BD:33:42:9C:2C:E0:B8:5F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501a061c-bd48-332f-8f92-550cfc1181cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:03:e3:d3:23:31:c7:eb:14:c8:1e:09:63:56:69:ab:b0:
         99:5b:6c:64:ba:ac:bc:23:72:1d:bc:dc:d8:16:cd:0e:ce:7e:
         4f:28:c0:6a:58:12:93:c5:31:31:be:db:59:bd:02:1c:e6:6e:
         e3:b6:08:32:b4:04:2f:87:03:36:a1:dc:aa:5b:ec:13:34:ad:
         11:ee:5f:d6:0c:de:e5:9e:73:af:1a:ab:fc:8d:3d:d5:bd:8d:
         0f:70:b1:ff:ac:9a:65:15:79:b8:e4:0f:ce:7d:ce:a8:29:12:
         c6:26:11:e5:af:d9:ab:6e:0d:52:c1:2f:28:1d:cc:8f:f0:c4:
         ac:c1:cc:a7:e9:c9:0d:94:c7:09:20:e9:4b:a2:eb:29:63:cb:
         ac:4f:28:17:00:55:47:75:6f:e9:da:70:af:aa:77:46:58:12:
         29:f4:10:80:a4:25:a9:f8:79:c0:a9:3b:b1:b2:b0:f8:12:dd:
         ea:5b:9a:64:72:bb:de:4f:42:dd:c4:6d:0f:8e:e5:14:53:c5:
         62:cc:9e:a8:52:72:af:c3:45:ec:6c:fc:37:8a:a5:2e:b3:ea:
         df:d7:85:91:c3:cb:05:23:e4:6c:ab:9a:9a:6d:1d:9f:89:cd:
         2c:bd:c2:9f:d3:2b:61:c2:dc:31:33:ff:ca:ff:fa:0c:c5:6b:
         6b:ec:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:01 2025 by rpki-client