Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
File:                     5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa (raw, json)
Hash identifier:          NMmsnhb/BD0H2Snj4eo9XTLC5CvdkLp400A+h0bOLK0=
Subject key identifier:   4B:FE:D9:52:80:2D:40:68:7B:2B:8A:CB:86:F8:D3:42:8C:D9:6B:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DBA26D6E399540328468280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     19836
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:26:d6:e3:99:54:03:28:46:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5309ef3d-04b7-4071-8349-734a864ebb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:5c:2e:39:a1:e2:13:2a:f2:f8:2f:77:be:
                    bf:ea:3a:9f:8f:4e:c9:83:76:f6:a0:d2:b9:a4:2c:
                    aa:e9:45:b0:77:ea:1c:bf:fe:72:bc:43:60:dc:91:
                    7d:03:77:5b:e4:94:78:af:e3:06:87:27:26:0a:13:
                    44:6c:b3:1c:17:7f:48:96:c6:d6:56:f0:34:89:61:
                    36:7f:3b:8b:59:03:8f:6c:08:94:a5:05:30:d3:5b:
                    33:f8:c1:87:59:5e:a1:00:ab:45:0d:48:05:fb:84:
                    62:1f:19:12:8c:96:44:56:e9:71:ef:46:08:be:a3:
                    da:57:86:f8:8d:0a:48:81:14:c7:2d:23:ab:6a:57:
                    29:d4:33:be:94:ce:66:42:89:dd:d4:91:d6:d8:24:
                    39:60:60:d6:58:4b:70:7d:2e:33:d9:f5:4e:36:40:
                    9c:54:97:fe:9c:b9:5f:99:16:9b:e2:25:03:c4:e2:
                    2a:33:0b:19:34:43:6d:22:b5:c8:e2:93:8b:0c:30:
                    be:69:48:bc:fe:44:09:1f:06:a4:d7:0a:07:ef:bd:
                    53:f3:dd:f8:26:9c:ab:9e:b3:f4:45:7e:d6:cc:b6:
                    a1:52:1a:db:d7:0a:d5:3a:33:fa:7a:06:7a:3f:92:
                    83:3e:e0:d9:2a:29:17:d6:af:54:39:78:eb:aa:53:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:D9:52:80:2D:40:68:7B:2B:8A:CB:86:F8:D3:42:8C:D9:6B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:38:ba:ac:c7:c0:7b:cf:25:90:84:18:c5:24:3f:8c:6a:
         93:f9:73:07:3c:3a:d8:6f:0e:60:d8:98:49:a0:c0:38:46:74:
         39:d5:7e:22:4a:8f:85:00:4d:3c:ed:3d:1e:a0:77:58:38:fb:
         9c:aa:e0:2f:4e:91:70:c1:82:a3:61:15:f4:d2:35:d8:82:70:
         88:e3:8f:12:d3:db:04:b2:77:ec:a4:3d:69:fa:1e:98:fa:e3:
         31:a0:05:e1:a3:9b:e5:83:3e:64:a2:f2:f7:33:eb:0b:3f:84:
         db:1a:f9:4d:93:dd:a0:e7:30:aa:42:24:59:fa:48:1f:96:fe:
         f4:7c:26:69:d9:f6:21:86:a5:e0:7c:c3:eb:9d:58:28:bd:af:
         c9:23:87:1e:3b:ed:3f:ab:0f:c9:94:0d:63:4d:aa:81:4e:af:
         c3:6f:97:7b:a9:25:6a:df:08:cb:b6:67:e7:4e:e0:b9:c7:aa:
         3a:82:db:d7:13:85:b8:e6:ed:b4:db:05:0a:bd:13:e3:89:27:
         99:59:e9:f5:25:6e:58:83:26:ba:b2:a8:9b:75:cd:04:9a:53:
         0d:55:0c:fc:6f:cd:24:42:ca:ee:ab:5c:bb:35:1c:20:b9:2a:
         c1:f1:75:3a:83:b6:d0:93:0c:ba:c1:32:63:bc:44:45:9e:87:
         e1:5a:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:20 2025 by rpki-client