Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e267b7-fa94-3341-8467-fed2532d90d3.roa
File:                     59e267b7-fa94-3341-8467-fed2532d90d3.roa (raw, json)
Hash identifier:          JMdTJaSl0M+zF8py6T2SXT4/S009yUjLgY5dGIinA4E=
Subject key identifier:   62:77:F3:84:82:0E:5A:DB:C7:6B:C7:42:19:E8:8C:96:F9:A8:E2:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B522D196B72CA491AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e267b7-fa94-3341-8467-fed2532d90d3.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396604
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b5:22:d1:96:b7:2c:a4:91:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=af25883a-7f4f-4be6-bbd4-48e57cf1d4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:ff:19:88:97:78:73:0c:8d:db:3c:1b:36:
                    cd:37:db:31:5f:0f:ee:ea:0f:b2:97:24:44:ed:7c:
                    ca:6f:9d:12:5e:d5:05:96:7b:cf:05:0a:8e:4f:d0:
                    3b:01:66:7b:29:43:63:bb:ca:17:ca:12:01:4a:7d:
                    cc:d8:9a:f0:78:84:d6:91:53:f2:7c:85:43:36:92:
                    c8:c5:fa:22:d1:fa:5b:be:63:c2:69:ab:86:3d:eb:
                    ba:c4:23:a7:fd:5d:cd:94:0f:13:f8:f1:9b:bb:be:
                    01:8f:b1:bb:19:bd:b6:23:8a:04:07:75:c7:46:d7:
                    ad:f6:b9:16:97:22:ee:29:b5:88:5f:14:d9:49:0e:
                    15:97:29:7c:74:c8:6d:58:eb:43:43:95:9d:48:00:
                    f2:4c:af:d0:65:ae:26:2c:1a:5b:41:dc:79:89:2e:
                    3b:c5:d9:8e:03:20:13:1d:a5:3f:65:4a:68:a7:b3:
                    18:22:84:fb:1b:25:ea:6c:4d:8b:c1:8e:65:00:a5:
                    bc:69:4e:46:c3:3c:a0:58:2a:fe:54:51:ee:83:43:
                    26:68:cf:ad:60:56:85:d6:c2:5b:14:a6:5f:f5:a8:
                    62:df:e3:9d:32:60:9e:c7:66:0d:13:5b:37:41:bd:
                    6a:c4:f4:e9:56:9d:d0:c6:d5:ac:22:92:d9:33:13:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:F3:84:82:0E:5A:DB:C7:6B:C7:42:19:E8:8C:96:F9:A8:E2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e267b7-fa94-3341-8467-fed2532d90d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8d:a5:e6:9d:d2:c4:7d:13:cd:62:5b:c4:73:b6:62:4f:03:
         2b:cb:60:c2:7f:6b:49:f5:1b:5c:24:4e:1c:5b:b0:5f:8c:d6:
         79:5f:54:fc:e2:ee:74:b1:54:03:8d:a1:6b:0d:84:d4:81:f3:
         ed:e1:4d:33:8c:a3:a8:19:47:c8:80:6e:13:4d:40:6b:f2:dd:
         dc:13:34:7d:f4:74:a6:2a:01:ea:4d:5a:68:7e:e1:f6:e1:73:
         03:c1:4e:ce:f3:e4:45:3e:80:4b:90:d1:08:c3:b1:17:f0:7e:
         5a:d8:18:da:c4:79:d1:ce:0b:a8:65:c0:3b:2b:01:2f:ae:b4:
         6a:52:f7:f8:99:e6:27:90:4a:f3:ab:0b:be:6f:ec:69:c6:58:
         ca:1a:65:ce:cc:2c:fe:e1:3f:a9:66:29:8e:2b:8f:38:4f:9a:
         e5:49:e4:7e:0b:f2:9d:1b:35:b1:aa:4b:20:63:2a:3a:e7:5e:
         b8:9d:15:97:8d:2f:0e:19:0d:dd:4b:f0:f6:66:61:38:91:4a:
         eb:b0:46:20:07:ba:16:6c:bf:f1:15:ba:be:74:a7:dc:9b:5d:
         b7:e1:db:33:8c:19:de:9e:a2:8e:9a:9a:e0:65:f6:e0:73:df:
         fd:6f:97:cf:2a:1f:c9:7c:9a:d4:75:aa:fd:ce:90:2e:94:1d:
         da:51:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:43:06 2025 by rpki-client