Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa
File:                     a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa (raw, json)
Hash identifier:          QTMb+X0664RmUNJBwPetrcBuyT5UmK8kvHvknkBqXzo=
Subject key identifier:   CA:96:AB:80:31:40:BC:2C:EA:13:88:10:61:DC:A0:B0:32:AD:2D:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A780C4839BD09AD6915CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     396582
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:80:c4:83:9b:d0:9a:d6:91:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=fce2cf10-1894-4961-be15-13f34e633300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:25:b7:c9:a4:54:7c:94:cd:01:84:f1:82:
                    60:df:57:20:2e:2f:04:01:9c:08:b7:44:53:f0:16:
                    06:eb:f6:a6:d6:d8:68:0e:35:c0:50:66:05:af:f6:
                    52:d9:c0:76:ff:c2:51:8d:87:f1:79:ad:59:68:d4:
                    8a:e1:ba:53:f1:66:a3:f7:b2:7c:22:ef:e6:d8:5b:
                    bc:95:5d:73:a2:8c:e2:1e:d5:f3:70:47:7a:c6:2c:
                    96:f9:a1:f8:92:ab:48:4d:03:3d:bc:cd:b2:2b:39:
                    0a:4b:6e:1f:90:f4:b9:47:6b:8c:c2:9a:1a:24:5c:
                    81:41:7a:77:92:1b:4e:5d:35:e9:b3:a9:94:b0:9c:
                    72:a3:c2:03:72:f1:1f:8c:c5:6f:55:1b:c5:85:6c:
                    f9:f9:a0:1a:b1:2b:6c:7e:90:33:94:e5:6f:35:1f:
                    5e:4a:f2:aa:79:43:82:d4:76:cf:00:bf:91:13:4a:
                    c8:c7:90:ec:24:c1:ba:c3:65:b1:ca:5e:80:ed:f8:
                    47:07:8c:68:8f:31:e4:4e:72:22:88:b1:93:58:d3:
                    67:49:46:e7:4c:dd:34:96:ee:48:ec:27:15:9c:97:
                    fc:63:7f:fb:f7:a0:81:5c:1c:c4:18:99:d5:7a:0d:
                    25:60:a8:67:21:24:c0:ea:de:41:c2:35:e6:8f:36:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:AB:80:31:40:BC:2C:EA:13:88:10:61:DC:A0:B0:32:AD:2D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:d0:78:c3:62:bb:67:96:be:95:38:c3:15:d9:cc:a3:ea:
         b2:53:a1:b9:fa:96:e6:dd:f1:97:7f:4b:3d:36:ce:8b:ed:dd:
         ce:93:8c:fe:13:57:06:28:45:5e:b7:89:42:fb:0e:c5:18:f5:
         7f:a5:9c:8b:66:bc:da:2c:68:05:ed:98:d2:f1:17:f2:cc:ab:
         b3:c0:b7:8a:09:3b:2c:8b:45:b0:c3:d5:ec:26:f0:f7:98:3b:
         c1:26:b6:21:71:aa:63:bc:04:8a:9a:0d:f5:0a:51:3e:c3:37:
         a3:ee:08:c0:50:fe:6b:93:17:1e:15:84:3e:71:e9:3f:79:99:
         d3:67:4a:75:f2:a1:94:0d:e8:d8:93:52:3d:b1:1a:53:fd:84:
         98:50:95:d7:b9:58:82:aa:2f:6e:44:76:c9:f5:9f:98:28:e8:
         28:60:de:d8:7e:e0:39:cc:f7:87:bd:05:fb:7e:f7:81:33:8a:
         a7:fa:3d:c4:70:67:6d:27:7b:06:d0:19:40:ee:35:cd:37:0b:
         3c:e8:c4:e7:fb:44:61:66:a5:8e:ac:1a:24:cf:e0:73:d9:5b:
         22:50:14:68:5a:73:1a:b1:08:ef:da:f4:e0:d7:56:7b:e6:bd:
         28:5f:20:33:a7:94:1f:eb:e1:da:61:47:8a:8c:7e:af:0a:f2:
         3a:61:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:11 2025 by rpki-client