Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f35b58-96f1-3b5b-b88e-2f62804d24f7.roa
File:                     86f35b58-96f1-3b5b-b88e-2f62804d24f7.roa (raw, json)
Hash identifier:          9wln/LcMkuJF3puB8OYy6vUbqCVdSZVQAgAclxPnMJY=
Subject key identifier:   40:69:33:54:87:0B:DB:40:9D:AB:96:27:39:00:48:3D:DD:73:64:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B838215435380B173FAA1C23A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f35b58-96f1-3b5b-b88e-2f62804d24f7.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     36619
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:15:43:53:80:b1:73:fa:a1:c2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=071c8f9c-87dc-4a2e-a9a8-a19fa5223cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:96:b7:1c:d7:d8:02:6f:6e:64:20:59:30:
                    06:ff:23:16:dc:a5:bf:2e:14:6d:a8:f7:c1:64:5b:
                    e3:81:39:ea:04:90:bc:ef:53:e3:d7:aa:b7:ec:ff:
                    5a:59:4d:32:bc:3b:0a:39:1b:62:7e:f6:5f:bd:76:
                    38:0e:ab:94:51:c2:69:2a:e5:82:9b:89:27:e2:ea:
                    66:ee:1d:28:25:43:cf:2d:47:28:b8:d8:7e:c1:5e:
                    82:1c:6a:4a:06:56:89:c0:01:15:6c:46:89:8c:07:
                    0d:bb:c3:de:83:5f:c3:20:76:09:b8:60:40:ef:ea:
                    70:cc:f7:00:78:05:0e:da:96:8d:27:ab:be:d0:a6:
                    06:f6:01:70:83:46:93:96:eb:cd:65:31:27:74:9d:
                    4a:c4:24:48:d2:08:03:7b:76:64:48:38:74:4b:81:
                    a2:7f:0b:a4:46:51:c6:d4:51:b3:5d:f2:73:bf:81:
                    1d:0a:90:97:b3:00:89:a9:77:bc:a2:2d:fa:2f:e5:
                    6b:98:85:ba:a5:15:1d:61:ee:44:10:d3:bd:1c:ce:
                    83:cc:34:a4:d8:c0:47:b5:02:dd:75:5e:4a:e9:8f:
                    f8:d6:b2:79:97:d4:6c:71:a3:b2:bd:27:d5:01:75:
                    83:44:ed:0c:a6:c3:de:08:1f:ff:6a:f2:84:a7:16:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:33:54:87:0B:DB:40:9D:AB:96:27:39:00:48:3D:DD:73:64:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f35b58-96f1-3b5b-b88e-2f62804d24f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:c8:a1:e6:44:1d:96:a0:df:ec:ea:71:75:d5:0e:d9:95:
         74:0b:78:35:31:30:b9:c7:6c:61:2a:16:1a:99:b5:6d:5a:d2:
         ea:c6:ef:85:d3:cc:c1:a7:dc:6a:08:e9:53:54:1b:d5:05:27:
         01:af:e1:60:7d:51:66:80:3a:3f:5f:57:23:68:df:3c:6d:02:
         ac:92:20:30:b1:ad:0b:9f:83:f4:8b:1a:2f:0f:19:82:e9:fb:
         cf:6c:87:83:db:eb:9f:57:00:6e:c6:d8:85:9b:ad:1c:67:e5:
         ea:3d:42:72:ce:1a:f8:cc:c0:91:b6:e1:28:90:39:e4:07:25:
         0d:29:e0:c0:1f:a3:16:e9:9a:ce:4c:e5:0b:e9:d3:53:b4:bf:
         25:a3:a9:fe:64:ab:9d:7c:dc:15:68:08:31:5a:c6:e8:1f:8f:
         02:be:bc:04:89:b9:03:11:32:d6:b6:12:1a:1f:66:f8:ac:74:
         0f:1c:6f:ec:1c:2d:d4:46:8a:d3:93:73:46:98:20:6f:82:03:
         5b:5e:f1:e5:c4:62:05:c4:bb:5a:f0:36:dd:6d:cd:aa:d5:87:
         96:cf:ed:22:c0:a8:72:39:18:98:f6:c1:b5:2d:fc:67:f2:06:
         1c:1b:38:e3:d2:45:d5:95:eb:28:ed:b0:04:f0:ac:e8:d7:d5:
         8d:31:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:29 2025 by rpki-client