Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa
File:                     626419a9-c295-3f13-aa03-4beb373bbd7b.roa (raw, json)
Hash identifier:          dPcrDOAQTTqQvmI+VgaUpaFRVDXd/LTm49C+I7KTSnc=
Subject key identifier:   7E:BC:5B:7C:01:A0:13:B9:CC:73:C4:A1:31:B2:49:DE:E2:9C:83:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC180D8B0B6AFF8B673C600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     36622
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:80:d8:b0:b6:af:f8:b6:73:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=68bbacea-26da-482b-af8f-d9b42e096afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0e:e0:bd:43:a8:93:d9:d9:1f:63:94:14:0e:
                    45:d8:ff:4d:87:b6:e1:f7:48:4e:29:26:b9:3f:25:
                    93:af:64:6c:50:1b:05:3e:45:72:c8:9a:c6:df:36:
                    b3:0d:8d:c6:e0:7d:c2:cd:1a:d3:fa:1c:b7:a3:12:
                    9b:7c:37:9a:46:02:30:a9:e4:54:ec:ac:d4:5a:29:
                    01:d5:e5:26:c2:90:24:ec:f5:c7:94:ef:07:53:e6:
                    94:91:ee:78:4b:37:91:3d:99:d0:c3:06:0e:ef:68:
                    e0:27:68:9a:4b:70:68:d6:22:b1:cf:44:fb:65:6b:
                    62:11:83:8a:4c:89:f9:ac:38:96:96:05:ec:c2:e4:
                    f8:a9:41:50:c7:53:e8:e2:63:9f:28:ce:37:51:63:
                    6b:43:fa:17:72:54:6c:f4:78:43:27:90:05:c8:94:
                    0b:4d:45:5f:b3:15:9b:69:70:31:59:e1:b9:6e:e0:
                    47:34:8c:35:fc:6a:d7:6e:3c:2e:d8:d6:e2:61:e6:
                    06:04:f5:c2:e9:73:af:c1:2b:b3:2a:c1:b8:51:b6:
                    eb:8e:dc:09:ad:58:85:1a:47:c1:dd:4f:f5:43:79:
                    93:10:6c:5d:02:93:e6:04:98:c7:2e:07:45:50:b6:
                    99:ff:4e:07:72:c2:44:6e:53:c5:14:46:7a:6c:16:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:5B:7C:01:A0:13:B9:CC:73:C4:A1:31:B2:49:DE:E2:9C:83:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:28:3f:90:b0:24:e1:79:e9:c8:6a:bf:d6:7e:39:aa:47:e7:
         b5:83:d5:c8:b6:e3:4f:01:f7:01:cd:8f:9d:09:af:6c:c0:f9:
         b7:d2:2a:f6:84:4d:ad:55:ff:df:ac:4f:63:25:b9:a5:ce:bd:
         21:bc:86:70:c6:01:a8:83:1c:75:0c:0e:ba:bb:63:47:4c:f5:
         03:8a:5f:bd:f7:1b:f1:c1:a4:31:ba:8a:5b:a9:98:2a:c2:a4:
         e8:df:c1:af:74:d2:1f:36:e3:32:0a:e0:81:98:c2:eb:4c:48:
         c1:5d:19:5b:74:6c:ca:3f:52:c7:58:db:4c:61:62:be:5c:c0:
         63:97:fb:69:49:40:fa:25:64:71:67:a7:87:18:16:88:3c:bb:
         fc:47:7b:03:c9:40:94:a2:63:1d:91:f6:6f:37:6e:50:4c:74:
         49:a7:8e:33:df:c0:5b:1a:e3:5f:8a:d6:41:c6:6a:ec:e2:c6:
         5e:ac:19:a3:79:97:28:25:80:92:a9:ff:a4:2e:b8:d1:1e:15:
         40:84:e3:2a:f6:bc:f8:3f:f0:27:ce:dd:84:dd:2e:fc:f7:6f:
         ef:4b:7f:83:08:3b:ab:c0:51:7d:f5:1f:54:7a:e6:11:7b:e5:
         ed:41:e3:b9:bb:51:cb:49:8f:e2:6e:fe:77:63:2a:44:7b:95:
         b5:b8:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:17 2025 by rpki-client