Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f7a042b-e2d7-3c74-87c6-1370c0357a37.roa
File:                     5f7a042b-e2d7-3c74-87c6-1370c0357a37.roa (raw, json)
Hash identifier:          B9YDIhG5NvV2NBzTWpb3OaohrtcqDF+A71Z3pGyQGcw=
Subject key identifier:   9D:07:4F:61:5E:B8:FD:C8:D3:E7:27:D6:D6:0D:F2:F5:43:69:07:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF25695F8D55319787BF41200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f7a042b-e2d7-3c74-87c6-1370c0357a37.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     397198
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:95:f8:d5:53:19:78:7b:f4:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=587ad356-5ad5-4b33-97ff-ab897ed43152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:16:9e:b3:0c:88:07:22:7c:5e:c3:d1:a3:
                    6f:44:de:7b:05:62:f6:85:de:7f:09:75:6f:4a:7e:
                    eb:f3:05:73:48:25:a2:04:d6:76:01:72:db:9b:e0:
                    3d:21:b7:1e:d5:2a:fb:17:9e:79:3b:3a:5b:59:98:
                    d5:af:d7:48:81:43:eb:98:23:5b:b3:8b:09:ea:91:
                    2f:11:e2:83:75:ae:20:0d:c5:48:38:6c:6b:af:d7:
                    2c:61:72:3f:4b:f1:d2:18:f4:26:f9:2a:7f:b2:e6:
                    f1:22:6f:3c:85:23:bd:b3:80:d0:31:da:4e:cd:77:
                    f4:d0:58:35:21:3f:15:d3:9f:e9:17:0b:95:21:8a:
                    2e:5d:1f:18:64:03:82:4d:b5:96:12:bb:78:ce:c6:
                    e9:ed:fb:91:70:e4:53:aa:f4:22:89:88:a3:3f:33:
                    fc:06:d1:ae:ba:fc:a3:59:a7:f5:7d:3b:dc:aa:2d:
                    64:61:5e:33:09:7c:bd:a5:e6:32:9e:f6:ea:9f:0b:
                    5b:3c:85:8c:86:44:a1:13:32:ec:6a:1d:df:95:e2:
                    2d:4f:07:05:1a:b7:88:e3:78:c6:90:9f:b7:73:d9:
                    ca:34:1b:e2:d7:c9:46:24:b2:d9:47:11:84:3b:8b:
                    bc:82:a5:be:ef:af:fd:91:64:c2:95:1a:71:15:13:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:07:4F:61:5E:B8:FD:C8:D3:E7:27:D6:D6:0D:F2:F5:43:69:07:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f7a042b-e2d7-3c74-87c6-1370c0357a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:26:ee:75:9e:fb:6c:31:b0:14:14:86:f9:8c:57:d2:86:60:
         85:1e:e5:4d:5f:9b:a6:2a:c7:39:26:c7:7b:85:b1:b0:76:12:
         35:a0:be:7d:5c:6d:64:4c:a5:0e:e7:b4:f7:2e:fc:c9:49:05:
         81:38:ab:81:7b:66:88:ee:a4:c4:6d:83:a0:c5:c7:50:5a:89:
         22:36:9a:b1:6a:82:a4:4b:e0:b8:8d:c1:35:cd:9c:cf:78:3b:
         38:1d:3e:0f:0f:09:22:22:c5:38:63:54:e3:fe:91:bd:4f:2a:
         6f:94:09:3d:a3:cf:b9:26:ac:91:29:35:f1:3b:9f:de:01:c9:
         49:be:cf:58:9f:34:ac:c4:b4:0c:73:ee:09:71:24:32:77:0d:
         47:6f:b1:6d:be:f9:06:5c:0a:ee:db:1e:23:56:42:14:93:ef:
         64:94:00:d0:91:c1:63:b8:0b:a3:3f:5d:49:bd:dd:70:66:88:
         f6:64:bf:83:8a:b5:b0:39:f9:aa:33:ff:24:ab:b1:2c:17:c7:
         9a:25:5d:88:52:bf:97:b8:42:15:fa:a2:54:d5:b7:2f:60:ff:
         fc:e5:a6:03:fe:01:b0:0a:c7:17:f8:58:39:eb:8d:aa:7e:f6:
         bc:c1:8a:ef:e6:05:a9:23:c2:1e:09:7c:3c:e0:2b:59:cb:fa:
         2c:e1:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:08:14 2025 by rpki-client