Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f511294-8b5f-3fe9-81ae-82313b594994.roa
File:                     6f511294-8b5f-3fe9-81ae-82313b594994.roa (raw, json)
Hash identifier:          ZlBcVJfdW/hBvd151Fcb/mIDML7kNYqhY+vWvV1iZhw=
Subject key identifier:   4E:00:4C:99:9C:71:2C:20:FC:01:16:BB:C0:83:BD:A1:63:3B:E1:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B5871695173A732E84C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f511294-8b5f-3fe9-81ae-82313b594994.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396574
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b5:87:16:95:17:3a:73:2e:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=3140b966-b20e-4782-949d-12139881c731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:4b:d8:2d:69:1c:c9:e7:83:bf:af:26:4c:
                    ee:cc:cd:36:45:25:17:58:44:26:58:1d:92:55:05:
                    b1:bb:84:1f:12:81:dc:19:bc:a2:3b:03:7c:d8:69:
                    65:61:8c:66:8b:fc:f9:96:2d:80:ab:4c:87:df:a9:
                    af:ee:76:64:b9:db:a4:37:8e:a2:bf:b2:e4:dc:fc:
                    87:75:09:f8:a2:b7:20:f9:f2:80:66:a8:f2:b9:88:
                    da:27:42:d6:fd:36:46:32:e9:07:8e:7c:cb:88:5e:
                    2b:62:7e:b3:63:f0:e6:ec:fa:0f:44:5a:2a:ee:c1:
                    b3:ca:cb:ea:bf:8c:de:ab:21:20:d5:15:48:c4:ba:
                    6b:c5:b5:28:d1:f1:87:e3:a4:33:ea:c3:c5:a2:cb:
                    61:5b:d6:50:3e:5a:e6:55:d6:c4:56:5a:ba:2f:2a:
                    5a:f5:ab:cc:95:da:bd:38:ae:e2:d3:5e:33:9f:4f:
                    c5:db:9c:b8:37:3c:d9:8d:a9:6f:e6:8a:9c:2f:1d:
                    49:2c:5b:ec:91:1f:ee:5b:0f:83:07:e8:4f:76:7d:
                    bd:ac:cd:f7:00:71:cd:9e:bc:50:38:b6:51:0f:c7:
                    62:2e:54:9d:f8:37:ef:b0:cf:73:34:0c:6e:33:cf:
                    38:ed:e0:44:97:13:62:f2:b5:45:97:26:bf:65:f7:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:4C:99:9C:71:2C:20:FC:01:16:BB:C0:83:BD:A1:63:3B:E1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f511294-8b5f-3fe9-81ae-82313b594994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:ca:0f:b3:70:ec:0a:c3:fd:63:99:53:d0:ff:18:3d:14:
         f5:cf:50:26:28:a6:0e:36:6e:d2:0d:d5:e5:61:8e:9f:cf:44:
         83:83:19:59:55:6a:75:67:60:66:29:a2:1b:23:9a:d1:f5:47:
         40:2a:1c:9a:77:dc:51:69:a9:c7:a0:5d:6e:59:58:22:8b:85:
         e2:ce:45:df:4c:2d:6d:b5:39:20:3d:43:2f:3f:22:ce:b8:3b:
         dc:56:1c:d4:78:89:bc:48:48:10:10:58:8d:fc:5e:61:9b:fc:
         7f:47:8c:d3:9b:6d:7e:15:f3:9f:11:e4:28:3b:5d:a0:18:29:
         7d:24:3d:63:02:50:c8:02:89:ab:c3:a4:ca:74:d7:d6:a0:5c:
         6f:ba:63:74:21:2f:11:cb:cc:11:6e:cc:9f:79:8b:03:1c:0d:
         86:b6:57:b3:7b:dc:9c:b4:1c:de:9e:08:9e:86:40:2e:f2:4d:
         e4:ef:a9:ab:cd:db:8d:5c:a4:f3:22:6e:22:ac:7f:98:92:8d:
         32:ac:fc:e5:04:ad:f3:2b:59:d2:d3:75:c8:95:bd:6d:31:1d:
         3e:c7:4c:ca:01:84:e5:12:bb:f6:16:cd:19:10:46:25:b5:a8:
         4d:27:78:78:70:0c:54:d7:aa:51:d1:2b:f0:07:e4:4e:88:9e:
         46:0b:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:24 2025 by rpki-client