Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa
File:                     8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa (raw, json)
Hash identifier:          /euqCLdW/gqNQcbLB7azwq11I2v9XYIDWrtfY5y89RM=
Subject key identifier:   6C:01:17:28:8F:2D:28:DB:98:99:86:A0:10:E0:E2:28:EC:F8:CB:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B838213158A3ADB48D057A500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     19836
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:13:15:8a:3a:db:48:d0:57:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=4a7c4f24-da02-4c76-a6ca-6d8ccd583df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:92:e3:4c:73:c1:b5:78:5b:7e:e9:d1:6a:
                    62:b5:cb:78:38:76:d5:e2:e8:03:ec:d0:8f:05:78:
                    47:f3:09:6b:d0:a8:0b:1d:23:02:0b:6e:23:a9:3f:
                    c4:87:eb:b5:dd:27:91:65:8e:24:fc:18:28:05:df:
                    6b:53:02:95:b5:d7:84:bf:9c:c7:63:36:2d:66:c5:
                    d5:b1:18:98:8d:74:3d:7a:3f:eb:fe:89:45:f0:88:
                    a0:40:46:86:27:0e:63:40:97:bd:42:e2:6f:80:6b:
                    e7:d5:b5:a7:8a:bd:9f:8a:c0:d3:5d:9d:8e:df:b0:
                    de:43:29:08:7c:0f:af:1b:9d:f4:8f:b7:50:e6:02:
                    26:22:19:33:68:79:e2:88:2e:5e:80:85:d9:86:cd:
                    c0:02:0b:e6:fc:36:00:ca:23:ee:5b:12:b0:96:a2:
                    c1:f5:1e:28:20:a8:59:85:99:d4:14:ad:a6:cd:7d:
                    0f:5d:c5:ab:7b:e1:fe:dd:ea:03:df:8c:b5:01:6f:
                    d4:67:ab:41:d2:4c:d8:63:1e:d4:77:35:de:58:dd:
                    a0:d5:26:45:63:34:b4:bb:5a:71:03:ad:01:ff:19:
                    3b:f6:3e:4c:60:35:7f:d2:fe:ca:25:ba:10:6c:0f:
                    f3:80:42:63:4e:2a:42:06:2a:20:1a:93:f9:47:1e:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:01:17:28:8F:2D:28:DB:98:99:86:A0:10:E0:E2:28:EC:F8:CB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:8f:63:0b:f4:e9:47:21:07:1f:ce:46:50:3c:90:7d:5a:
         ec:d6:2a:97:51:d6:cf:44:c2:5b:8a:56:66:e2:59:5d:3c:b6:
         4d:d4:53:86:d4:79:df:4c:b8:a4:26:76:16:bd:e0:66:95:d7:
         23:a0:01:65:62:b9:26:72:83:58:55:97:ad:ad:00:29:78:ea:
         96:83:49:bb:d1:f0:fd:e3:cc:99:b7:fc:d1:10:f5:8d:ae:82:
         93:63:75:27:99:cd:f3:5d:9f:83:f4:9a:e4:2f:d6:fe:e5:96:
         ba:8d:8b:e3:cd:71:75:1c:62:81:3f:eb:ee:d9:f1:b6:3e:63:
         a0:f5:c9:ce:0f:de:db:22:80:73:38:3d:02:05:9f:77:20:07:
         c5:98:de:30:3a:cb:3e:35:65:05:57:c2:b3:e9:7e:22:74:61:
         50:64:d6:c9:25:d3:80:2a:fb:c4:49:58:95:34:23:61:c6:a4:
         4f:93:9c:c4:f9:6c:b6:95:82:64:13:a8:92:18:f6:e9:8d:a8:
         3a:a8:e8:80:97:3f:c7:90:98:8b:de:d4:5a:de:27:b8:7c:d6:
         7e:dc:99:63:39:fb:56:fb:da:2e:f3:50:5c:5e:bf:ab:fc:8d:
         13:ce:be:8e:f5:37:5f:03:ef:2a:81:d7:d8:78:d0:1b:1e:14:
         36:f5:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:11 2025 by rpki-client