Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
File:                     7e325443-0f22-3427-b95c-d38a907b559b.roa (raw, json)
Hash identifier:          ewLhUpW36Frt/OmoPDB+3eBZSWw5823TK0aJ+TPECr0=
Subject key identifier:   8B:5A:DD:B5:9A:38:2F:92:0B:97:48:A5:B8:5A:F2:77:88:09:F5:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DBA2781AA3F38B836027C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     396600
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:27:81:aa:3f:38:b8:36:02:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=cb01423c-66b7-4b61-a8de-f62d5a918aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:7b:01:90:c7:dc:75:d0:8b:e6:ff:cd:81:
                    b8:99:e2:3d:6c:0b:a9:53:c0:63:c0:0c:e7:29:dc:
                    fb:96:54:76:2f:76:6e:77:e3:2c:c8:31:f2:b2:a2:
                    33:d2:95:89:a1:8a:a1:f4:f6:f0:52:9f:30:44:42:
                    d3:0e:2c:74:60:2e:a6:34:b5:2b:8c:99:d5:25:7f:
                    df:e2:3d:ab:c9:a6:0d:0f:a8:fc:ed:bc:d1:d1:82:
                    e7:60:3a:74:88:da:11:6b:18:4a:4f:16:30:71:58:
                    a4:5d:4a:b5:ed:b1:6d:b2:21:09:88:c5:f3:d9:37:
                    ed:40:b0:f4:68:6c:98:9f:00:57:ac:fa:3d:91:aa:
                    5e:be:bc:9a:ea:ad:d4:bf:e0:1a:26:d4:ca:91:52:
                    21:15:ef:8e:2a:b6:c9:64:5f:7e:cf:35:aa:76:83:
                    ae:f0:c0:d4:32:25:3e:7d:01:20:3d:27:63:db:53:
                    2c:98:d2:df:55:e4:2f:dc:21:8a:1b:a8:4e:92:fd:
                    96:e3:e3:88:1e:85:ef:6e:57:c8:5e:eb:2a:4c:01:
                    0e:d9:00:be:e1:5c:53:1f:ee:cf:89:9f:14:2b:d3:
                    a8:f9:fe:75:42:78:3b:6d:87:a5:6b:b7:48:49:02:
                    32:7a:e1:1e:c8:4d:7d:f0:4f:99:ab:11:54:2d:2e:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:DD:B5:9A:38:2F:92:0B:97:48:A5:B8:5A:F2:77:88:09:F5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:75:86:14:3b:0d:75:17:95:83:aa:ad:60:2e:43:09:1f:
         05:f5:bc:35:8d:08:1f:ed:1c:f0:3d:3a:dd:01:64:47:0b:42:
         53:8f:94:7e:e5:d7:66:01:f6:e8:39:e3:45:c9:01:96:de:70:
         fc:c0:9a:ea:1e:c7:df:db:a5:aa:db:8c:07:d4:f0:82:37:b5:
         79:31:3c:71:62:e6:6d:c7:7d:a7:96:96:c1:ed:ff:99:f4:a5:
         bb:68:34:62:f1:9d:06:5f:1d:ca:9d:74:66:f2:80:77:b9:3e:
         a7:b2:95:2a:73:07:7a:1e:5c:96:00:f3:45:59:e3:cf:83:9d:
         91:b5:4e:75:27:cc:24:3c:1a:88:f8:4e:c0:bd:b8:cf:a0:96:
         51:f0:c6:c2:0a:d7:7a:fb:ec:37:5d:dd:79:d0:ac:c2:d9:70:
         e5:51:59:da:20:9e:81:a1:a1:91:e0:68:ae:76:ba:03:17:9b:
         54:1a:67:8b:ce:68:69:88:94:94:7c:42:de:a6:ef:b1:b5:37:
         02:ea:43:8e:58:ca:06:46:15:96:f3:99:d5:d4:61:37:48:66:
         b9:c4:73:51:1d:1f:0e:b7:eb:1c:68:20:56:08:86:9f:95:33:
         b9:d7:92:73:49:dd:83:00:a3:4c:5f:80:22:e0:6e:bf:2e:48:
         1c:32:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:18 2025 by rpki-client