Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae99faa-8a27-3b4e-8f86-1728b1a01af5.roa
File:                     9ae99faa-8a27-3b4e-8f86-1728b1a01af5.roa (raw, json)
Hash identifier:          KhV3M7GuZI8WSyEjIRVZCIA3UDIaGyc1ostzN2+9vic=
Subject key identifier:   35:3D:70:DB:E3:4B:35:A2:45:A5:97:3A:8F:E0:E0:A9:AA:A4:6F:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B663212BB017E84229CC73420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae99faa-8a27-3b4e-8f86-1728b1a01af5.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     36626
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:12:bb:01:7e:84:22:9c:c7:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=332f8fb5-6732-49b7-9da4-a6bd0be30abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:c2:87:7d:1b:92:f7:d2:b3:63:04:00:1f:
                    b3:bb:84:3e:3e:79:97:3c:12:5b:95:b0:b0:d0:9c:
                    bf:41:bc:fa:56:97:22:e4:cd:54:83:23:4b:98:1c:
                    9b:71:db:f2:78:5a:32:1e:83:8d:5a:e3:ab:ee:ef:
                    4b:6d:9a:67:d2:41:86:1a:51:d9:ea:ce:e8:45:23:
                    ee:2d:a9:94:85:3d:7b:f4:2c:c6:d5:68:9a:4d:b3:
                    9d:bf:e6:c7:01:49:56:90:a3:04:51:a7:79:a1:3a:
                    a3:19:60:2e:4e:8e:27:58:b5:f9:ad:47:e5:5e:8c:
                    d9:f1:af:eb:d4:f5:e7:80:ae:db:65:55:d5:9e:42:
                    f8:65:17:0c:94:dc:f0:89:99:33:4c:d3:58:5c:57:
                    cf:70:1d:da:a0:32:dc:fa:3a:43:fc:12:0c:b6:c8:
                    71:d3:64:b5:3a:6f:1d:09:fc:80:e2:70:15:96:0f:
                    b2:e2:be:08:69:cc:3c:94:7b:f4:e1:b7:53:fb:68:
                    75:83:47:9c:f7:81:26:93:3b:3f:ae:31:6b:31:16:
                    df:78:6b:cb:53:4f:40:87:92:7a:0b:57:7b:98:b2:
                    a2:2d:ca:e7:ad:cc:b0:0a:a2:bd:84:28:a9:34:de:
                    f9:6c:dd:7d:ea:76:5b:6a:3e:bb:dc:ea:53:5f:c0:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:70:DB:E3:4B:35:A2:45:A5:97:3A:8F:E0:E0:A9:AA:A4:6F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae99faa-8a27-3b4e-8f86-1728b1a01af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:de:f9:76:dd:6d:37:6a:42:51:b8:e1:fb:0e:f0:ba:6b:67:
         05:b3:80:13:a5:23:24:3f:1f:5b:78:5e:22:47:2a:8d:b4:85:
         8f:4b:a8:30:32:1a:05:b6:2e:d8:96:f9:d2:af:a1:9d:e5:aa:
         c6:15:fe:99:22:a6:3f:36:7f:96:73:08:32:ca:db:e0:49:e4:
         cb:1e:54:db:d6:e9:aa:8b:2c:bc:37:26:bc:df:39:5e:75:49:
         aa:67:da:7d:0a:02:e9:b3:1d:5d:d5:8c:f1:89:c1:68:25:7f:
         ad:79:16:24:8f:a5:f4:34:75:93:3f:8a:18:31:05:27:fa:d0:
         fb:7d:66:83:d2:27:45:a2:bc:d5:4f:e0:49:62:b2:4b:46:86:
         c7:99:ff:af:76:f5:58:24:67:ef:41:75:da:34:04:e5:a9:0b:
         f1:d0:3b:51:32:e5:9b:ea:dc:c2:0c:6a:3b:81:ec:dc:d8:4f:
         b4:eb:a5:dd:53:96:43:1b:5d:cc:ee:13:c2:73:00:46:c2:9e:
         9b:d0:78:d4:0d:e2:78:63:88:b8:3c:fe:63:50:ad:ab:bd:17:
         55:31:9c:90:64:ba:0f:9a:ee:b6:7e:42:52:68:da:0d:40:d6:
         92:80:13:d2:69:15:4b:df:60:f5:0a:af:3e:2f:aa:f6:20:41:
         28:22:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:29 2025 by rpki-client