Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6037ec81-2377-3dfa-8d74-1679414b50d3.roa
File:                     6037ec81-2377-3dfa-8d74-1679414b50d3.roa (raw, json)
Hash identifier:          OBJOrGYcM2pbNTrcAVt/P5JbwopoOj9Zks0mbxAKD84=
Subject key identifier:   2A:B3:AC:BA:48:48:7C:5A:BB:75:C2:EB:D5:F8:87:06:FB:CF:65:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A7864233B6B4ADD2279D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6037ec81-2377-3dfa-8d74-1679414b50d3.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     396540
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:86:42:33:b6:b4:ad:d2:27:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=1c101005-f5b1-48aa-9234-7fd24c3caccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:b4:27:91:9e:13:b4:7c:ba:64:56:0e:16:
                    df:ce:d1:e3:d7:eb:5e:2c:f9:cd:e1:12:2e:cf:71:
                    7c:23:69:27:26:35:a7:b2:87:d2:1a:10:d1:23:cd:
                    35:d2:d7:46:56:70:06:f6:91:83:1f:62:23:e4:55:
                    a9:d6:ed:a3:eb:7f:ee:97:dd:db:11:60:5f:10:28:
                    89:9a:5d:9d:23:c3:52:eb:af:6b:a7:f6:cd:a4:b0:
                    87:11:2a:8b:db:93:1f:0e:ea:3f:29:04:ed:9f:e2:
                    4c:c5:00:1f:2c:bb:2d:07:76:86:73:76:32:0b:35:
                    b7:59:51:cf:ff:02:26:bb:f7:5c:62:9f:97:c4:52:
                    a8:5f:2a:34:17:cd:4a:9e:28:01:26:07:42:82:c2:
                    11:a1:87:59:cb:b2:a2:ea:52:fe:ba:16:42:14:30:
                    f0:74:dc:90:5a:b8:f0:f5:8f:5b:e0:c4:ac:0a:be:
                    54:1d:ff:c4:62:35:fc:bb:ba:63:64:99:6f:fb:6d:
                    51:b7:7b:ac:3c:56:fc:de:c2:21:73:aa:99:32:dc:
                    7c:a7:9c:51:73:9f:84:d5:cd:8e:98:dc:e6:8f:c9:
                    d1:9e:1d:5f:61:d2:f8:28:1c:2e:e7:c8:0a:e4:e6:
                    10:dc:2e:85:1c:22:01:7e:3a:88:69:99:57:30:df:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:AC:BA:48:48:7C:5A:BB:75:C2:EB:D5:F8:87:06:FB:CF:65:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6037ec81-2377-3dfa-8d74-1679414b50d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:4d:f5:fa:85:de:f8:16:d2:51:9d:ae:9f:e8:98:9f:7a:
         82:72:72:ad:54:2e:34:00:8f:66:a4:ca:d6:61:b6:e3:7b:b5:
         a9:79:0a:d6:00:e3:fc:47:03:9b:09:41:ee:47:2d:80:c0:76:
         2a:7e:75:fb:b0:1d:09:ea:49:7b:46:69:ab:00:02:97:57:1b:
         4c:bb:0f:13:8c:23:dd:ab:6b:9d:7c:25:4b:2c:fd:b2:d8:b4:
         74:a3:08:22:88:a0:8d:3a:32:58:24:2f:a4:e2:aa:16:15:33:
         87:71:af:0f:0e:a9:4b:2b:bc:6d:21:be:dc:7c:48:21:06:af:
         51:d4:cc:17:1f:4b:d8:83:ea:a2:0b:c2:d0:6d:4e:ea:b7:06:
         03:a5:a6:74:a7:92:cb:4a:86:16:fb:7d:10:53:9e:c3:09:6f:
         bd:3a:a9:33:fd:a8:96:c9:62:ce:f0:72:3d:3b:56:5b:17:62:
         29:cb:58:11:67:7e:ef:48:2a:fe:12:cb:bc:70:70:0a:32:11:
         0a:af:dc:92:bb:5c:3d:91:9c:ec:3b:2c:f3:4a:1d:dc:bd:4f:
         fc:5a:4d:5a:79:bc:90:04:cd:0a:b1:17:71:df:ad:06:fc:a4:
         3f:a0:2a:c1:76:81:39:4e:cc:23:12:bf:8b:ca:2f:11:de:96:
         cc:cf:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:30 2025 by rpki-client