Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa
File:                     905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa (raw, json)
Hash identifier:          fxIMBgr8B5Yb+ewGSPc7VcPalocJ2SiPyo9rpPGrlXE=
Subject key identifier:   7E:4B:A7:AD:CF:C7:59:48:26:2C:36:E7:65:62:15:78:DE:85:6E:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66320F4173094A499172E180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     19836
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0f:41:73:09:4a:49:91:72:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=9720ed27-8dc2-4fae-8548-65d333a7140e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:27:f7:e8:06:31:32:80:84:ea:88:66:15:
                    7c:03:29:5f:1a:c9:69:1a:2b:19:7a:86:ae:95:30:
                    57:33:93:69:98:13:10:25:e3:81:9a:b2:9d:ab:f3:
                    f2:bf:a7:91:85:87:fa:7f:83:50:bc:89:61:2a:0c:
                    01:3b:95:ad:79:20:18:57:b3:3d:72:3f:2a:50:46:
                    e3:e8:63:85:94:e8:d7:cc:36:ac:f9:d1:8c:26:1d:
                    de:8c:8d:44:57:fd:ae:cf:b7:e5:b6:54:8f:a9:f9:
                    c7:c6:e3:85:02:60:e9:9a:ba:1c:66:5c:e0:cd:12:
                    e4:56:c7:63:19:e4:20:64:ce:86:24:65:ec:57:ca:
                    80:2e:4b:76:e4:29:64:e6:da:cd:88:3b:6a:be:93:
                    ee:cd:64:6d:79:ee:ba:57:14:aa:6b:e7:4d:a4:49:
                    4e:51:eb:39:b5:8a:54:56:fd:7e:c7:4a:49:ea:73:
                    ac:bf:bb:31:03:d7:2a:79:25:bc:4d:89:31:b7:c5:
                    73:1e:57:f7:b9:ca:84:a3:f4:f7:63:7c:ba:4e:1d:
                    46:71:cf:09:7c:7d:72:6a:aa:b2:7d:ee:a6:ea:4b:
                    26:96:48:1a:cc:94:fb:12:99:71:39:1f:24:c5:39:
                    18:6e:0c:a5:70:8e:db:38:70:1e:40:32:67:89:d0:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4B:A7:AD:CF:C7:59:48:26:2C:36:E7:65:62:15:78:DE:85:6E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:64:a1:40:bd:1b:74:93:f7:d4:34:28:97:ac:83:a0:0d:
         63:bc:82:97:30:62:0a:94:4f:54:e3:bf:37:88:fd:3d:f4:d6:
         23:74:5e:97:00:ab:5b:a7:c6:2f:c2:f3:1b:64:93:a8:86:d3:
         2a:9a:6c:c3:e7:8d:8f:39:e9:8d:9d:01:a3:f4:6c:af:65:62:
         1e:f7:f5:a6:2b:29:07:ed:db:21:5e:ff:03:fa:c9:f3:1c:5e:
         93:f3:f3:8e:30:79:65:93:f9:3c:eb:4a:14:3d:fa:8a:3d:c6:
         24:ba:69:1a:23:af:ee:23:77:2f:31:84:32:6d:87:15:45:d7:
         06:73:ef:5d:6b:db:04:0f:cd:ab:63:bd:c0:f5:a5:dc:a8:dd:
         f9:06:9e:d9:0b:cd:84:14:2f:d0:5d:28:ec:4c:53:17:2e:5e:
         05:1a:74:db:4b:32:96:22:b1:cd:4c:0b:7b:4c:7d:40:11:40:
         83:ab:59:2d:05:ea:c7:71:f6:e4:cc:96:d7:64:f2:9c:2f:ce:
         f2:26:b6:86:49:da:09:f1:c4:24:e6:76:96:1e:38:e3:6e:df:
         13:2f:fe:c5:ca:37:b3:5d:38:4c:8c:a0:5a:93:60:14:8d:6c:
         ef:ce:7d:b1:b0:c6:39:f6:b6:5a:47:fe:57:7e:79:bc:ae:13:
         ac:7c:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:51 2025 by rpki-client