Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2ffed7f-9d9a-39bc-b4ee-32335e113fa0.roa
File:                     b2ffed7f-9d9a-39bc-b4ee-32335e113fa0.roa (raw, json)
Hash identifier:          8jSatRy/RIs2NSNpgOS56+Uk5DYSH5XcUSoVG51SJ6w=
Subject key identifier:   B0:23:F3:E5:CD:B9:AC:4E:9F:8F:8A:D0:B3:0E:B8:97:59:18:6D:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD01CBD85F3BA7F072DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2ffed7f-9d9a-39bc-b4ee-32335e113fa0.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     36620
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d0:1c:bd:85:f3:ba:7f:07:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=ff08ed9f-296b-45d1-88dc-f6f819b1aa73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:35:e3:49:52:1a:23:7d:2d:cc:62:0f:75:
                    d2:08:72:d7:a5:7a:40:2f:d2:4c:59:c9:34:8b:b7:
                    e1:e3:cd:37:bb:dd:6b:f8:e8:11:19:0e:7c:fd:f9:
                    61:35:3d:6e:94:c8:d0:90:b1:7b:56:ff:37:7b:c1:
                    7e:01:29:d4:76:08:15:0f:72:6e:71:7a:5e:8b:46:
                    53:19:33:88:56:4a:19:57:78:ab:54:af:40:9d:b9:
                    62:70:c8:3a:e0:05:83:0d:86:05:2f:2f:6d:44:21:
                    a6:4d:74:5b:ca:59:5e:18:0b:9c:49:ca:93:af:9a:
                    d6:5c:be:5e:e5:fa:2b:78:80:67:46:df:3a:1b:bc:
                    20:5d:43:56:ae:23:ba:38:c4:ff:9a:4d:0a:aa:59:
                    9b:60:c0:03:3e:fb:57:63:b8:00:fd:70:6d:dc:38:
                    4d:c0:f4:1e:ad:91:0f:86:0e:2e:58:4f:9b:17:65:
                    ed:f3:fb:bd:de:35:d9:c4:45:3d:b7:80:76:d9:6d:
                    8e:4a:52:2c:1c:7f:44:0e:da:22:a2:0e:e6:41:33:
                    f4:cb:28:9d:da:f7:1b:d8:e1:8f:1a:4c:02:6d:c5:
                    4c:4d:26:b5:64:17:ec:a0:e0:00:9b:f7:83:ec:8d:
                    ec:54:ce:4e:e9:74:71:5e:da:e0:2c:2e:f5:cf:07:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:23:F3:E5:CD:B9:AC:4E:9F:8F:8A:D0:B3:0E:B8:97:59:18:6D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2ffed7f-9d9a-39bc-b4ee-32335e113fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:6a:61:f9:a6:97:28:99:55:b1:4c:94:5f:1d:f5:36:3c:
         9d:cb:d6:a8:a0:89:d0:c3:42:21:64:44:fe:a9:cf:52:e7:44:
         1c:64:fd:53:60:2f:75:9c:96:11:b3:b3:14:7d:0d:25:0a:f1:
         2f:93:b4:b9:66:a3:96:1f:75:44:e9:a1:f3:42:fb:03:bc:56:
         1e:6b:0b:58:07:1f:04:7b:db:9f:d0:e3:ba:44:54:a5:f1:1d:
         8a:be:01:b7:47:01:58:b7:ad:11:b1:97:63:6f:99:74:c4:43:
         56:d5:55:e2:cc:b2:29:8f:e2:6f:63:43:79:94:a8:41:60:d1:
         48:84:4c:14:fb:89:7e:22:b2:4c:d3:e0:e0:d8:d2:c9:4c:21:
         e6:d7:bf:9f:fa:37:28:25:e1:69:a4:46:de:dd:6b:6a:4b:35:
         19:d7:21:73:99:b6:54:ee:fe:13:f5:8c:3c:f3:fc:09:4a:a2:
         4c:70:b5:fb:cf:ef:04:1a:14:b1:9e:ec:0e:50:da:f8:f6:03:
         08:7f:ab:e9:2c:c5:bd:29:a1:83:24:ba:02:42:69:1f:a9:da:
         1b:94:d8:2a:33:85:4e:2d:f1:ca:fc:fc:bd:5f:80:77:c8:fe:
         8e:e1:85:61:28:87:85:a1:e0:59:d3:5f:90:5f:1c:16:d4:32:
         8d:e0:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:18 2025 by rpki-client