Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fdb93f-1f70-395c-8444-528e662f3621.roa
File:                     78fdb93f-1f70-395c-8444-528e662f3621.roa (raw, json)
Hash identifier:          FxP3HEJ4YoMNjz5O2pjovHpTXpVyN7i7z8+LxkvRF7w=
Subject key identifier:   F8:70:25:14:FD:7E:30:2F:88:AE:28:A2:B1:6A:6D:3D:6D:D3:79:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F526B3B7D74FB44B3541880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fdb93f-1f70-395c-8444-528e662f3621.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     32651
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:6b:3b:7d:74:fb:44:b3:54:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=04e3bef5-1651-4649-9783-337431226814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:45:b3:6a:12:e5:0d:d1:0d:38:4c:9c:03:
                    37:a1:ed:43:c8:55:07:83:3d:eb:1d:a7:9f:4a:bf:
                    b4:35:e7:c5:65:22:00:f6:cb:a4:25:00:b6:9e:d4:
                    fa:5d:be:30:c3:23:96:79:47:35:73:28:46:25:75:
                    f7:04:9f:8c:a0:10:2e:3a:57:14:cd:62:cb:33:ea:
                    e6:42:5d:fe:de:a5:9e:14:02:39:b1:f1:94:6a:ea:
                    7e:bb:8d:29:19:c9:92:05:7e:36:4b:a1:0d:57:89:
                    11:cf:18:a0:2a:39:60:61:ad:6f:be:14:0b:b4:a5:
                    09:a7:b9:50:91:9c:ac:1d:2c:33:4a:a0:5d:ad:7d:
                    d1:2c:fe:74:ea:87:60:c9:b6:25:d7:c7:65:d4:09:
                    e6:75:6a:92:a1:e1:e2:38:92:39:d6:0c:0a:14:fa:
                    9c:57:86:9e:d9:92:25:73:22:23:8e:cf:4c:25:37:
                    20:76:1e:e2:3c:bf:8b:16:d3:ed:c5:a1:39:8c:b2:
                    ee:32:42:ed:0c:9b:6c:00:d4:f8:2b:8f:3d:53:e6:
                    6a:f0:3b:93:15:44:18:b3:3f:a6:7b:6a:4b:44:4f:
                    98:cb:8e:d7:5a:c3:d5:a4:9b:2f:f8:f3:6a:1c:93:
                    5a:e3:16:98:f9:dd:00:48:c6:4c:02:c1:46:76:26:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:25:14:FD:7E:30:2F:88:AE:28:A2:B1:6A:6D:3D:6D:D3:79:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fdb93f-1f70-395c-8444-528e662f3621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e6:06:d4:79:cb:b8:c4:30:31:58:3d:37:5b:0f:3d:bc:ce:
         38:09:08:fc:94:67:88:fa:4b:b8:f5:07:00:37:1b:3b:70:4d:
         3a:25:1a:8a:31:82:2d:0e:db:a7:48:3c:ff:0c:bf:71:d4:ee:
         73:7f:0e:fe:18:aa:37:b3:bc:ef:94:5f:ae:ab:fa:15:ba:f3:
         28:a3:af:53:8c:38:23:f5:90:56:3a:3f:2e:54:2c:9d:35:5c:
         3d:38:7f:a1:aa:d1:c2:2f:ee:84:ad:5f:f3:44:0a:f9:e1:12:
         fc:44:69:3d:15:27:d8:8e:65:e2:04:86:99:86:0b:2a:74:56:
         dc:43:32:0a:3f:67:05:c4:3a:73:95:a6:bd:ce:bc:b1:9d:08:
         69:91:ee:45:22:63:fd:2d:99:14:09:62:84:2e:14:be:04:93:
         47:a5:21:ac:bd:78:9a:d7:e1:61:fc:d8:6a:9f:6f:f3:96:89:
         d0:73:b6:af:d0:bf:a8:60:22:f8:e6:94:5e:8e:54:dc:ef:81:
         d8:95:0f:be:fb:a3:62:81:6d:39:1e:db:3b:f1:db:2a:26:7a:
         89:51:40:ea:0b:c4:68:c2:28:af:a1:79:c6:a4:3f:9d:c8:0b:
         e3:9e:b5:ad:a9:ec:b6:12:0a:50:ca:aa:9d:bd:8e:fd:d4:1b:
         c4:93:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:58 2025 by rpki-client