Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa
File:                     9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa (raw, json)
Hash identifier:          4QP0beqsQruc9dF0Kz+3ir8Qpw2CyfXbRDHiOdPuZ8o=
Subject key identifier:   43:95:ED:7A:82:2D:B6:BF:7B:BA:00:55:04:FB:AF:0C:A7:F6:B6:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF25694BEED0B9A3D870882C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     397212
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:94:be:ed:0b:9a:3d:87:08:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=ecb21a61-6ce0-425c-a797-c6fa5e830de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:fa:4c:41:24:cc:1e:74:aa:3d:98:53:7b:
                    1c:e9:f6:71:5a:4d:71:2a:26:6f:cf:56:50:fc:af:
                    a4:7c:90:84:54:19:b9:1c:60:36:bd:34:69:36:c1:
                    01:48:53:38:07:51:85:4c:9e:22:d7:21:92:8e:6f:
                    1b:eb:79:05:f9:76:2c:a4:ac:55:59:b3:b7:07:73:
                    ce:ef:e1:76:02:f8:5a:1b:40:db:98:fe:53:75:db:
                    83:ca:b7:af:62:e0:80:84:03:ad:98:b0:6e:76:27:
                    5b:83:0b:ea:30:8a:42:9d:84:8b:3e:3a:b1:36:d5:
                    d6:a2:e8:6b:47:af:c5:7b:f0:6c:b9:34:79:51:10:
                    e8:6a:02:a7:87:55:39:2b:64:fc:8f:a0:25:44:28:
                    03:12:9d:0b:67:a5:3e:97:76:b5:59:ff:a2:e3:1d:
                    c3:a9:9d:94:1e:c1:f4:ad:30:a6:69:53:61:80:04:
                    84:35:cf:c6:60:69:51:59:5a:17:6c:29:04:85:53:
                    fc:7f:8f:6c:95:79:82:15:a1:47:46:4d:df:f2:77:
                    fe:e3:7e:b7:dc:b8:fa:f7:fe:71:28:94:a0:4a:da:
                    2e:21:d6:42:c3:87:db:16:b1:2b:85:68:e4:c5:38:
                    05:98:b1:1b:63:e7:35:e2:17:5f:75:05:02:b0:9d:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:95:ED:7A:82:2D:B6:BF:7B:BA:00:55:04:FB:AF:0C:A7:F6:B6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:d3:52:6d:aa:25:a9:68:7d:85:48:7d:ec:91:b7:aa:39:
         f4:72:99:77:f1:d5:5e:c0:73:ad:35:62:83:ff:0a:3a:5e:15:
         b3:38:8f:53:99:b1:01:e7:51:24:92:87:92:8c:00:58:4c:70:
         b7:d3:e8:cd:1e:64:8c:60:5b:d5:b0:89:b3:9f:3c:08:36:17:
         12:e4:44:7c:ee:e4:1f:0a:b9:47:21:5c:b6:c2:a0:05:e7:b5:
         0d:22:58:5c:ff:7e:a2:9b:51:a1:15:d8:b7:0e:1e:40:b1:d5:
         a0:40:72:b4:23:07:26:c3:c4:36:d5:08:3f:f0:06:84:a0:26:
         ae:95:1b:89:6e:b9:28:c0:7f:58:57:16:0b:a7:fd:2c:d8:9b:
         4b:9f:e8:99:c6:96:46:a1:71:e6:42:3e:31:0d:55:29:0a:28:
         39:2f:66:a3:61:90:32:7a:d5:b2:be:f7:13:04:f5:33:f6:7b:
         cb:26:60:a1:af:44:f4:77:af:aa:a6:45:61:c7:df:ad:aa:9e:
         cd:f1:80:9a:1e:c4:f8:7d:de:b3:fd:e9:04:f9:40:71:67:e1:
         a2:0a:c5:99:26:79:8d:de:91:da:46:d1:b9:7d:9a:8f:39:ba:
         b9:a1:f2:fd:69:d0:45:e9:c9:77:f8:0d:33:c6:55:37:b4:2d:
         db:13:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:06 2025 by rpki-client