Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
File:                     684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa (raw, json)
Hash identifier:          2pcIrPt8J8LYWOrcUVyYWH6KR2QeaKiTDMNIGe5lPNs=
Subject key identifier:   69:30:0D:BC:4C:FC:14:45:87:94:1E:12:3C:92:A7:F0:61:67:F0:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081CE6BC63B5F744CFFEB50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396610
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ce:6b:c6:3b:5f:74:4c:ff:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=2ead5fdc-a8d9-452b-9966-d6f7b44b15a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:10:b7:fc:54:40:09:31:f7:29:0f:ae:72:
                    14:29:97:ee:8f:45:6c:c1:7b:28:c0:1b:a5:e4:f6:
                    f3:a9:e5:35:14:c9:c6:8a:9c:a2:6d:0d:d3:e8:2f:
                    05:20:6b:ec:17:9e:86:a7:cc:10:a4:93:0f:d0:c5:
                    15:9a:eb:87:df:24:0f:c0:58:a8:a0:8d:71:f9:f1:
                    be:27:8f:d8:a7:4f:f1:68:b4:4d:b0:8a:65:f5:63:
                    5f:7d:98:2f:cf:cf:be:0d:f1:67:10:66:52:81:b0:
                    96:d5:0e:d5:6e:7d:d9:ca:08:9f:c3:6f:3f:3b:67:
                    fb:d8:9b:07:ef:10:a9:af:7d:e7:57:98:b7:7c:94:
                    c2:07:e3:90:02:9b:5e:15:b0:09:82:26:eb:45:6c:
                    44:9b:97:ba:a9:bf:91:02:dc:ea:67:ec:27:d0:d0:
                    ab:7f:3d:23:9b:97:f2:66:32:f7:f7:52:a2:57:30:
                    c5:74:c8:6e:c8:6d:09:33:9c:7a:92:4f:13:bb:c1:
                    74:f7:d8:98:7f:81:16:c3:ff:a2:85:95:88:56:9d:
                    93:cc:10:67:c8:49:1d:11:1d:db:0f:d7:1f:1e:2b:
                    26:7b:72:44:77:76:78:11:66:d3:a2:9a:dc:99:ce:
                    a0:8e:e7:d6:de:65:17:7a:cf:79:17:2c:df:37:63:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:30:0D:BC:4C:FC:14:45:87:94:1E:12:3C:92:A7:F0:61:67:F0:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:12:08:0f:38:83:58:3c:10:3e:34:62:fb:54:d8:37:b7:
         c8:1a:0e:ac:d8:d9:94:5a:35:19:55:11:5f:08:87:38:8a:91:
         da:5b:91:b1:db:57:88:71:07:63:f8:f3:a5:2b:07:03:e4:06:
         43:74:fc:d6:2c:2a:eb:d6:24:5b:d7:9c:5d:49:5b:9b:02:19:
         9c:3c:c3:69:02:10:9e:11:6e:f8:7f:8c:db:55:c2:a6:ad:a5:
         9d:79:a7:9a:8b:37:d0:4a:2f:47:3f:bd:07:9c:2c:49:05:44:
         93:e7:22:22:77:0a:fe:f9:8c:44:43:56:b5:78:9a:c8:56:6e:
         41:82:f7:07:45:20:a9:1d:84:3b:c4:cb:4a:c5:76:76:7a:60:
         f3:a1:f4:5e:3c:2b:45:4e:26:00:02:73:be:de:8c:b7:8e:c8:
         96:60:6a:b9:1b:f7:d1:53:29:cd:d7:55:cf:7a:06:fa:94:4b:
         7d:85:86:44:cf:68:c5:ff:60:52:8e:9c:7e:6e:7e:95:5e:c6:
         54:a8:d7:75:c8:9e:d1:b2:aa:17:f8:42:b6:32:70:e7:cb:f6:
         4c:af:14:37:1c:c9:11:1b:e5:7b:28:18:a3:cd:4c:5e:73:18:
         35:d9:6e:74:ee:3a:a4:92:34:6a:4e:f7:f3:da:4d:a2:16:22:
         a0:92:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:59 2025 by rpki-client