Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa
File:                     925a88b3-753f-379c-ac87-5c1b94e37e92.roa (raw, json)
Hash identifier:          pjCzie+ZfKn0/AAOR82MK/iIPrEKs+nyR4CSPXWzEfE=
Subject key identifier:   76:4F:08:A1:45:02:DE:D9:10:75:B5:4D:D0:EC:09:9F:0D:3B:8D:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D41E9D28EF381775B080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     397209
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d4:1e:9d:28:ef:38:17:75:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=06950353-9c10-452a-87b4-8ef5306d3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:e9:72:c5:4f:99:49:da:45:0f:69:2d:95:
                    c4:3f:52:ca:4a:df:40:a5:5e:b5:6d:02:7e:a7:2b:
                    93:47:3b:1c:18:2c:b7:83:cd:73:c6:79:f6:0c:b9:
                    65:b9:02:b3:7f:b9:7e:eb:d5:64:49:41:7f:7a:d4:
                    47:fa:2e:ca:d5:7c:9c:79:70:01:e9:d9:94:58:78:
                    4e:25:34:50:97:bc:a8:ed:50:4f:c4:c2:8d:fa:d1:
                    cc:46:39:90:7b:69:6d:b6:97:71:9d:cd:2f:0d:07:
                    99:2f:36:b6:cf:73:d0:1c:e7:81:9d:ce:e1:23:23:
                    9e:09:34:3e:81:4d:d1:54:a4:86:8b:aa:6b:34:4f:
                    4d:41:69:d5:5b:ee:53:45:b1:a5:f8:3c:16:61:fd:
                    e2:fd:63:25:ee:57:ec:4f:f2:2e:14:ea:26:ef:93:
                    8e:a3:a7:1d:46:21:b6:86:d1:31:ed:b6:ed:21:03:
                    de:bd:91:0b:40:ee:1c:ba:6e:fd:5b:62:7d:c4:db:
                    d7:a9:eb:f6:98:1f:0b:f6:fd:b2:02:fb:ce:c7:0d:
                    7f:34:3f:cc:f1:e8:f7:8c:f3:29:96:49:7b:4c:ca:
                    b6:00:55:80:15:ca:28:de:a0:62:04:a0:27:3a:ad:
                    8c:70:04:2b:bf:44:12:32:7d:24:a8:14:fb:53:50:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:08:A1:45:02:DE:D9:10:75:B5:4D:D0:EC:09:9F:0D:3B:8D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:27:24:6d:2b:ad:74:b7:77:dc:4d:86:1f:17:49:6b:27:
         c2:a3:5c:31:aa:ca:9d:de:19:26:21:b6:33:b5:87:7b:32:bb:
         a5:1c:9d:4f:9e:9e:22:b2:ae:14:e3:ac:fe:62:af:70:4a:65:
         3a:a7:cf:e4:bf:02:18:e3:28:69:48:50:00:d3:23:ac:ee:eb:
         55:1c:46:bb:71:0a:13:9e:19:29:3b:74:2a:c2:28:cc:69:b6:
         a2:51:f4:1b:1f:60:51:05:8e:d8:e2:5d:8e:d0:64:c6:4a:0f:
         ef:8d:4b:08:2c:ca:50:89:a4:f9:87:c9:df:b6:b2:03:22:47:
         21:fc:f8:1b:36:41:1e:cb:87:2c:ea:1b:a3:cc:00:eb:5d:5a:
         1e:4e:b1:a5:1d:32:7e:7a:3b:24:36:b3:83:44:16:5b:41:8a:
         ee:52:22:01:34:36:6b:9b:e7:77:4b:a3:ca:b3:ca:9e:51:ea:
         27:f0:6f:57:77:c5:29:02:46:39:eb:8e:7e:55:9c:32:5a:a3:
         54:fb:f8:0e:8b:7e:e5:96:32:a1:7e:6b:07:62:99:66:d4:68:
         4c:46:a3:d5:af:4d:0f:4d:8c:4f:6c:d9:04:c1:e0:90:b7:5d:
         9b:80:03:cc:f5:69:c1:d1:dc:82:1e:a3:df:1d:d0:c7:c5:9e:
         89:97:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:43 2025 by rpki-client