Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa
File:                     a091aadb-7839-3ce9-b589-6d90ed660af7.roa (raw, json)
Hash identifier:          CHKdogbE/6eiOXlR6vhLy4vJT5K6Z7wvr806s8386QE=
Subject key identifier:   34:1F:38:7C:8F:14:CB:22:F1:F7:2B:5A:CC:C5:F3:DD:78:D7:2E:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC19367B0A20A5B5F763F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396542
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:93:67:b0:a2:0a:5b:5f:76:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=2565b9bc-4bdf-4481-b5d4-417d5a185df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:64:9d:c0:60:d4:64:e4:da:d4:b8:e2:3b:
                    be:80:30:16:d2:4b:bc:91:0d:9e:f7:86:d6:4a:43:
                    02:94:01:24:84:9b:ed:f8:f9:0d:33:13:c3:3a:cd:
                    ad:03:57:86:ed:4b:47:d7:62:c1:98:32:e6:58:a3:
                    00:05:46:60:37:a7:3f:57:56:e4:23:cf:3b:d2:43:
                    31:35:01:9f:a8:fc:a7:6a:4a:a5:af:a2:bc:07:4b:
                    74:81:c7:1b:5f:08:40:24:d2:04:39:dc:44:b7:84:
                    fa:f2:37:6c:07:40:20:fc:3d:a4:b4:7b:39:c3:1b:
                    16:79:c5:32:c7:61:96:49:58:61:dc:2b:ae:07:4e:
                    56:d0:0c:6a:34:d5:68:be:52:3e:ff:0b:e7:48:6a:
                    4d:9f:b3:26:50:99:ac:f3:ff:5a:48:5e:18:8e:16:
                    fb:3e:c6:66:8d:50:e2:34:06:f3:b1:69:ee:17:8c:
                    f8:eb:9d:15:09:1e:d4:d8:cc:03:7d:29:22:0f:32:
                    ed:15:b1:35:bc:73:8e:4f:0c:91:5b:75:e5:26:d9:
                    be:a6:86:9c:d3:19:95:4c:0a:51:3d:2f:b1:53:80:
                    d2:9f:03:38:89:70:a8:6f:56:90:77:aa:bc:7b:97:
                    2c:58:46:cf:3c:2c:9a:88:bc:46:ff:d9:50:ca:c9:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:38:7C:8F:14:CB:22:F1:F7:2B:5A:CC:C5:F3:DD:78:D7:2E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8f:a1:59:28:ea:e4:da:b4:c3:fc:cc:8e:f4:97:1f:79:fe:
         af:ea:17:5a:d9:6c:3f:fc:49:d4:ec:50:01:99:79:72:56:4f:
         70:e3:40:8b:54:5b:bd:2f:ac:26:45:07:6c:bd:9c:39:85:76:
         df:be:db:14:59:cd:f7:b9:95:43:c7:c6:73:c2:d6:2a:70:4c:
         e6:c0:f1:22:6d:db:eb:5b:65:34:45:72:54:25:8d:2a:d3:76:
         a3:80:7b:d8:b9:48:13:6f:96:75:44:f8:97:9b:c8:0e:2d:50:
         60:99:5c:40:a7:e8:69:1c:98:2f:fc:0c:4f:0e:b2:19:23:8f:
         f2:53:74:38:12:d5:ac:51:f6:85:8d:c6:3d:21:83:90:1c:b4:
         71:71:73:f9:d7:0d:db:c7:6d:9a:e4:eb:43:9b:88:e7:0b:97:
         24:5f:f4:24:56:a1:bd:66:5b:54:0d:ba:aa:ff:9c:d0:8f:4e:
         4d:8f:14:28:d5:01:98:f1:9e:97:16:4e:ee:67:1f:b3:01:21:
         79:5e:9f:78:5b:4e:41:92:25:29:1d:1b:5d:7d:d8:40:ae:af:
         af:cf:0c:8b:96:65:be:c9:a3:34:ad:82:85:e5:cb:ac:5f:1a:
         6a:c2:21:00:a4:fd:1b:e6:6e:1f:40:ea:cc:53:4b:ab:2a:94:
         3e:b0:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:39 2025 by rpki-client