Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa
File:                     55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa (raw, json)
Hash identifier:          quOvKYnLRk2jpms/n8SnlA8kntrP0uOM6llsSouX1c4=
Subject key identifier:   77:AB:E3:A5:88:4E:7A:0F:20:1F:98:45:3C:FE:D4:1C:C3:3F:DC:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C632FBF0AF3AB32463C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396563
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:63:2f:bf:0a:f3:ab:32:46:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=ccc71458-f5ea-44ed-a1cd-6de30c4c8aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:cd:72:42:26:91:1f:a3:dd:30:b4:13:88:
                    2d:e7:70:f9:67:26:a2:39:16:d3:20:49:6d:6a:c1:
                    b5:c3:c5:49:ed:34:2e:89:c9:8d:6a:e5:e8:5e:30:
                    48:c0:66:a7:63:0e:9c:d7:64:be:82:80:f3:21:cd:
                    e6:c2:37:dc:cc:a0:ac:5b:59:b1:99:b2:7c:2b:4b:
                    69:81:6a:76:04:b7:72:ec:84:f3:e8:52:73:de:9e:
                    b4:a5:dd:92:91:28:d6:85:71:f7:48:ee:f9:0a:51:
                    62:2c:2a:a0:97:dc:9c:86:9d:48:9f:70:90:ec:ac:
                    d4:4a:b6:0f:ad:57:66:cb:ec:b2:0a:fd:05:58:6f:
                    c8:ad:5c:ef:0d:35:ac:21:fc:4d:fc:66:49:a3:59:
                    88:f4:4f:db:7b:d2:5c:21:cb:00:23:f8:9f:59:b5:
                    41:d9:9d:8b:2c:74:0e:85:50:f1:9c:31:a7:23:76:
                    8b:5d:82:73:dd:dc:d3:a0:54:46:db:5e:e5:97:6f:
                    f0:a6:7f:35:42:73:61:6b:98:79:fa:5d:71:f9:7b:
                    f9:87:7e:7c:05:25:8a:a6:56:17:b6:97:f2:ac:aa:
                    ce:79:c3:23:ff:da:81:a5:f6:90:e4:6a:6c:1e:af:
                    00:d9:e3:d1:55:35:69:89:5b:fb:f0:7e:0d:a3:29:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AB:E3:A5:88:4E:7A:0F:20:1F:98:45:3C:FE:D4:1C:C3:3F:DC:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:54:da:20:e5:d6:21:e2:6f:03:90:4b:2e:bb:35:ef:a9:25:
         dd:d9:14:a9:65:03:7e:a0:31:50:75:39:df:f7:e0:e7:5a:cd:
         d6:b1:ac:99:ea:83:04:3a:51:00:0d:4e:57:e3:8c:8c:bb:b1:
         f3:19:9f:b1:85:5f:8d:bf:b4:a3:41:3d:57:f7:b8:1f:85:56:
         01:c2:1f:24:4b:63:6c:33:56:43:cf:21:32:28:2a:9f:e7:c3:
         92:a9:4e:be:3b:78:ac:f4:19:cd:a9:92:cb:8d:56:08:ad:cd:
         2c:85:80:b9:fe:62:e3:1b:bb:9e:fe:23:a1:71:e8:3f:c6:5f:
         b4:58:2e:67:78:90:15:90:d2:6d:7f:f6:21:3e:c2:94:c7:e0:
         49:40:f8:e6:19:fe:b2:86:42:8b:b9:18:ec:fe:27:64:45:eb:
         5a:a9:5d:87:06:b4:53:a4:5f:58:aa:24:1c:7a:e0:f1:bf:bf:
         3a:31:4f:63:a7:88:32:10:27:66:8f:0c:4a:db:53:e6:9a:57:
         e4:07:b0:1e:8f:fc:3d:16:8d:d4:2b:05:ce:05:34:ab:e6:34:
         61:45:db:7a:ab:c4:af:a6:2d:a2:28:85:2d:67:4c:5f:78:8b:
         ee:ba:a5:d3:50:02:bb:18:bc:b0:1b:99:a0:8c:9c:c5:b2:fd:
         54:2c:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:53 2025 by rpki-client