Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa
File:                     9bef2a72-fe37-30e4-9e93-584ff40315bf.roa (raw, json)
Hash identifier:          eNXiCYth/7esckZX2W/M45RJ2j1dNgCtVOu8U6/hubI=
Subject key identifier:   F0:80:F9:EB:49:A2:42:F4:8C:8B:94:8A:00:A3:71:98:C2:6E:FA:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081CFB92C5DBEDF1F2DE160
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396542
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:cf:b9:2c:5d:be:df:1f:2d:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=5602f874-672c-474f-9552-18beb23748e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:5d:ca:6f:9d:95:2b:40:84:e1:49:fd:98:
                    61:79:30:6e:eb:e0:ca:8a:bc:15:4d:49:34:d8:f3:
                    81:6c:f4:9c:64:57:b6:de:67:21:fd:19:14:5e:e0:
                    a2:cf:00:d2:29:d5:ea:db:ed:fa:e1:ae:8e:a2:1d:
                    c5:ab:43:ed:4e:2a:aa:45:a3:9e:2f:b1:03:c4:99:
                    63:8c:0f:e1:9a:50:b1:ca:59:b0:de:fc:cc:b6:4e:
                    1c:c4:ad:ef:5d:59:48:db:0d:27:a9:13:f9:17:2d:
                    75:ba:14:ab:5a:3c:6b:78:66:fb:43:95:9a:82:fa:
                    9c:e9:ef:63:2d:50:71:31:8d:e3:a3:d7:c0:62:05:
                    1c:d4:a8:f2:71:9f:b0:b7:3c:05:fa:c3:36:38:ca:
                    3f:49:77:36:6e:ba:4c:f3:84:f8:69:10:d3:85:ba:
                    c6:7d:77:bc:1f:d1:1d:cc:49:df:a8:59:47:4b:4e:
                    82:af:4f:64:5f:55:51:b2:89:ca:d7:7d:ff:7a:84:
                    9e:28:21:12:d8:0b:8d:46:46:8f:e9:fa:6d:88:69:
                    13:e2:6e:fd:57:60:7d:3f:cd:47:2a:ff:69:ee:95:
                    5c:5d:0c:82:8b:c9:2b:bb:62:5b:e5:31:57:46:4c:
                    47:53:77:22:af:9a:26:2f:ba:7c:39:8a:7d:c3:4f:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:80:F9:EB:49:A2:42:F4:8C:8B:94:8A:00:A3:71:98:C2:6E:FA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bc:40:29:de:90:16:41:57:67:23:da:3d:de:20:0e:d0:61:
         5c:11:45:03:71:e6:32:a7:98:99:b9:2e:a4:d6:bf:fc:a1:93:
         17:17:bd:b4:83:b6:d0:70:43:d6:f0:37:c4:51:9a:dc:17:01:
         4d:59:3e:ac:a2:df:e4:f5:8e:7a:af:c9:f6:9d:db:05:09:d9:
         a6:6c:dd:64:cc:2a:14:eb:1b:bb:ce:92:c4:ed:07:83:07:9b:
         b9:75:94:24:64:21:99:76:25:c7:1c:2b:24:89:41:a6:18:c6:
         c1:c9:db:74:34:1d:e9:cb:9b:ae:dc:db:ad:ee:14:f4:39:8e:
         e3:e4:4c:2e:cf:9f:0e:46:e9:69:fe:16:9e:3a:16:0d:93:b8:
         12:bd:ca:a5:72:08:52:02:b5:78:fe:5e:23:20:d7:dc:05:81:
         cc:d7:cb:f0:f5:99:62:b1:77:2a:65:9a:49:3b:e8:c5:4b:0a:
         91:2f:d8:de:e5:d7:2c:41:8a:b9:5e:af:c9:cd:ac:9c:00:c4:
         b6:45:95:90:af:ff:dc:a6:7e:05:50:61:08:95:1e:e8:18:7c:
         e0:12:f9:94:b1:00:e7:59:60:7b:13:15:1e:35:36:f8:58:66:
         d5:db:f4:3b:28:aa:d3:f8:9b:de:e1:72:41:a6:78:b7:48:c1:
         c4:e3:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:48 2025 by rpki-client