Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a0255a4-5914-3349-90db-7680a008d38c.roa
File:                     5a0255a4-5914-3349-90db-7680a008d38c.roa (raw, json)
Hash identifier:          NvONH7WMlwdzm9KT2YY13axWLtzsLAZSXDazh0cxZS4=
Subject key identifier:   71:0F:86:CF:A8:10:4B:05:6A:98:E4:08:2F:F8:FC:86:09:92:59:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B83820B3F3417662649D9E940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a0255a4-5914-3349-90db-7680a008d38c.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     397196
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:0b:3f:34:17:66:26:49:d9:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=8b5a40cc-54cd-4e5e-a84c-bb6e8a06be43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:db:a4:92:56:92:19:4e:c7:4a:cf:2a:a7:
                    61:66:5b:61:cf:85:54:fc:20:f5:d6:ef:75:c7:b4:
                    22:43:91:2d:a6:35:dd:73:85:0c:06:c6:c4:70:14:
                    88:aa:94:5a:18:26:af:6f:82:44:6c:6a:21:2a:55:
                    26:94:26:43:7a:fa:2d:4c:cc:9a:82:2a:32:a6:80:
                    17:5d:78:b7:b8:d5:d1:83:b7:e8:3a:da:7e:93:fb:
                    9f:ea:c2:28:e7:b0:bc:e2:ec:01:67:05:59:f9:96:
                    eb:91:0c:80:a1:89:4c:d7:45:8d:ba:7d:ea:d6:94:
                    71:f3:2f:af:11:40:74:ac:a2:24:76:fe:52:50:a9:
                    17:ab:0f:5f:83:a7:05:84:6c:8e:b3:ee:97:f5:34:
                    71:88:f2:02:da:f2:19:8d:33:b0:fa:cb:46:6e:8e:
                    59:81:1f:66:79:e4:62:e9:4c:75:ab:05:f3:05:f1:
                    a3:5c:f9:8c:44:eb:3b:c3:af:72:f6:29:f0:d4:22:
                    14:be:9d:55:74:40:dc:b2:71:4b:cf:84:31:dc:a8:
                    93:7e:50:d8:db:b2:d0:76:aa:e5:1d:af:52:3a:94:
                    91:f8:f7:b4:88:3c:22:9c:b5:9a:f7:34:7d:b7:a4:
                    5d:cd:ce:e9:f2:42:81:7b:64:87:ca:85:13:b8:61:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:86:CF:A8:10:4B:05:6A:98:E4:08:2F:F8:FC:86:09:92:59:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a0255a4-5914-3349-90db-7680a008d38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:eb:56:9f:85:38:c2:88:d5:5b:b8:ae:be:54:50:c5:2f:
         07:ad:f9:17:0c:05:4c:a0:37:90:f5:5b:0f:73:66:5b:71:d6:
         86:41:1b:a3:4e:46:16:3e:15:8d:a2:a5:a6:41:fd:fe:14:46:
         3c:aa:24:65:b8:81:8a:89:af:8b:54:57:2e:5d:80:49:94:40:
         1d:6b:33:3f:0a:83:92:c2:fa:73:40:c6:bb:4e:18:bc:54:70:
         40:f9:c6:65:43:b5:fb:e8:6b:14:d4:83:7c:42:a7:b1:58:5e:
         6d:d9:02:0e:9d:f4:78:86:45:19:27:27:25:a9:b1:9e:80:91:
         01:42:90:40:d0:51:33:ed:03:ad:68:7e:5f:c8:0c:86:c2:7d:
         f7:67:9d:05:95:96:1a:6f:f3:80:f9:6e:9c:a9:98:84:cd:ae:
         37:41:06:1d:cc:eb:e7:a0:0c:39:ea:04:0a:6b:68:0c:3f:29:
         b7:f7:a5:77:b8:c4:82:8e:ac:43:7d:57:e8:0f:d7:ba:46:b7:
         da:e4:92:09:3f:ae:7b:d2:ce:8f:e7:20:68:58:80:76:fa:ef:
         7d:24:29:48:20:04:21:88:33:6e:d7:3e:16:f7:f7:6a:54:9a:
         2c:c1:42:66:d5:78:23:46:20:f9:e8:1a:31:d9:e6:25:ed:0e:
         de:47:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:22 2025 by rpki-client