Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
File:                     97689e81-de50-349b-9e06-604ef847971c.roa (raw, json)
Hash identifier:          IxWvEzCPNG+bOVFROeZydkNJijP3MPZZE/PF04vjKeE=
Subject key identifier:   AE:C8:A7:9E:65:C4:AC:A5:DD:70:07:AB:BB:98:C8:5D:3F:C4:9F:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DBA23DA83F94C363AFD8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     40647
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:23:da:83:f9:4c:36:3a:fd:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=422efd65-7081-4f3a-a9fa-82795a80470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:d2:c0:71:9d:78:75:fc:51:99:92:c0:7e:
                    04:aa:46:6d:9f:63:29:b8:43:5b:34:1d:61:a9:6b:
                    e2:7d:67:45:ec:9f:ce:ad:90:e8:35:e1:c8:e4:06:
                    18:b3:01:36:36:ed:60:1a:c4:a9:df:58:dd:06:9a:
                    fb:98:30:07:72:21:c0:a7:d2:ca:c5:b7:21:6e:f9:
                    9b:2c:8d:8d:e2:bd:76:4e:22:6f:0f:35:a4:b1:85:
                    39:8f:4e:b3:72:fa:99:e2:06:85:70:96:8f:72:74:
                    59:3a:77:c5:c3:55:e5:bf:1b:bc:61:83:c8:27:d9:
                    04:cb:c4:dd:5d:8c:0b:ae:b0:70:af:19:9d:67:d1:
                    0b:02:5b:30:3a:36:17:00:5e:b9:53:06:b3:2d:a6:
                    bd:9b:3a:0d:ea:7f:28:a3:e4:35:46:db:2e:10:01:
                    fb:35:ac:b3:c4:dc:6d:c0:e4:e5:02:c4:6f:d7:fc:
                    f1:6e:27:1d:71:b1:37:a8:d1:6c:a6:0e:94:01:14:
                    68:19:7a:b1:a0:4c:54:ad:2a:0c:0f:01:dd:b7:0c:
                    e5:e1:cd:62:5e:64:6d:93:6a:2c:0d:cb:13:71:a3:
                    29:63:ea:3f:b3:30:89:35:95:28:49:0e:29:d5:04:
                    fd:58:77:7c:16:3c:59:85:91:07:d3:54:88:49:c0:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C8:A7:9E:65:C4:AC:A5:DD:70:07:AB:BB:98:C8:5D:3F:C4:9F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:f9:ba:51:0a:c0:6d:fd:1e:37:aa:a2:7e:2c:1f:ff:b5:
         a6:4a:66:df:66:a6:da:2d:4c:93:22:9f:fb:b8:09:f6:09:54:
         a2:ae:f3:40:51:a4:96:18:7b:f0:54:cb:a6:50:f7:1b:c2:4f:
         e0:bd:63:6c:e2:04:78:4e:37:70:73:16:f4:4d:68:a2:8a:32:
         3c:e0:ce:c7:a2:97:fe:36:b5:06:13:11:e9:e9:38:d9:97:e1:
         98:ad:39:bd:8d:2a:d6:ec:b1:73:f6:5a:4f:09:0c:ff:05:73:
         1c:c2:95:a5:1a:38:c5:0a:b3:df:3e:4b:ed:ce:a5:5a:2f:b2:
         dc:7b:cd:2a:67:07:0d:2d:dd:54:8a:78:82:f1:97:2a:0c:76:
         3d:52:e9:0d:ea:4e:ea:cc:99:4c:c8:af:18:c5:85:15:94:78:
         5e:4f:74:95:7f:dd:41:36:f4:d8:ef:82:c0:15:34:41:87:ee:
         28:fd:0f:9f:1b:8e:b0:66:51:a7:60:09:20:9d:2a:77:59:07:
         a3:e7:92:40:f4:fc:3d:c1:63:ed:11:71:3c:93:cf:ab:47:1e:
         8c:af:70:88:33:e8:4a:70:ff:1a:f0:c3:b2:c4:b7:67:31:46:
         2f:d3:a0:44:d3:fd:6d:71:f1:e7:73:d4:fc:5f:52:99:71:27:
         ad:53:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:33 2025 by rpki-client