Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4f13464-a776-3f8b-928c-8e02874729e5.roa
File:                     b4f13464-a776-3f8b-928c-8e02874729e5.roa (raw, json)
Hash identifier:          u1KBS9dBYsEXbd3D/IBKqEg+7M34ib5V6v4AnIPBOio=
Subject key identifier:   9F:4E:2E:8D:94:1F:3B:94:91:1F:F3:76:6D:05:F2:17:C5:A5:0C:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66320D6C7D752A8ADFA520DC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4f13464-a776-3f8b-928c-8e02874729e5.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     397206
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0d:6c:7d:75:2a:8a:df:a5:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=fe16b7f2-9dae-4994-a9bd-c9b5434718d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:7b:7e:fa:78:52:d6:da:60:11:9c:06:35:
                    f9:52:67:fd:be:d4:1e:9d:fb:86:ad:f2:69:4b:ed:
                    b8:49:97:ee:7b:a6:0c:a6:f4:12:a3:eb:76:5a:9e:
                    34:41:46:ca:79:eb:ce:86:aa:92:0f:90:d9:c3:84:
                    93:d7:b1:25:79:3e:89:05:44:c0:db:1c:b8:c2:7e:
                    91:8a:6a:b9:1a:8b:a2:f0:5e:fb:30:30:09:62:de:
                    27:d5:e8:d4:c2:ba:0c:d7:37:54:04:05:ea:d7:2f:
                    d6:c2:ac:66:c4:bb:f3:1b:cf:e9:0c:2b:9d:1a:87:
                    6c:71:a4:bc:61:54:f7:4b:91:a3:da:52:72:bc:53:
                    c0:3c:19:28:cb:aa:01:83:0c:d7:ee:fe:11:7e:79:
                    f0:51:67:1b:ca:0a:48:95:40:a1:9e:c2:ea:43:42:
                    e8:f3:9c:9c:5c:9e:4c:29:8a:43:cb:15:b1:5c:ad:
                    00:b7:95:eb:b8:90:10:59:ee:70:44:1c:aa:16:ae:
                    40:66:8e:10:67:e1:6d:70:70:3d:74:35:15:a9:51:
                    d4:61:4d:c0:bb:8f:7e:03:46:1b:6f:6d:0e:c7:d5:
                    f0:3e:03:1a:aa:e7:ed:24:cb:71:86:b3:56:df:2c:
                    5e:1d:f6:2f:c3:d2:0c:63:5f:a0:ca:a2:ab:3d:6e:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:2E:8D:94:1F:3B:94:91:1F:F3:76:6D:05:F2:17:C5:A5:0C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4f13464-a776-3f8b-928c-8e02874729e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:f8:6b:25:13:e3:6d:fd:da:ac:a1:0c:4d:17:83:37:32:
         82:d0:3f:71:99:31:28:b2:5c:4a:2e:4c:7a:9a:58:57:ba:76:
         6c:31:49:20:4b:20:aa:f4:8c:2e:6f:a1:75:59:b6:f0:a0:d9:
         0e:c3:2a:40:bb:fb:19:0f:89:37:6b:75:64:a8:2d:44:f4:36:
         01:19:f6:45:73:f6:c3:a3:c6:d9:34:d7:d9:6e:9d:2e:ed:36:
         1b:28:77:08:77:3c:4b:c3:2e:5f:16:f3:61:bc:f3:08:cb:a6:
         3e:14:07:9c:3e:ec:f8:34:3d:4e:e0:b9:45:0c:0c:a5:60:a9:
         d4:31:ec:b6:20:37:41:5b:4a:cd:54:8a:a9:62:42:0e:1d:f1:
         24:f8:de:f1:c8:42:10:c8:e4:e2:47:0f:19:38:14:3f:19:fc:
         36:73:a7:7f:a2:2c:07:ff:16:f1:6f:ba:58:be:20:36:83:39:
         a2:de:19:8f:5f:84:b7:96:f3:89:4f:3b:a2:09:1b:62:32:1e:
         1c:00:8e:80:26:db:27:05:6e:b0:16:04:2d:0d:5e:c0:a9:c9:
         bb:8f:3f:bf:40:d2:14:df:d2:87:e6:93:e0:a2:b7:28:f4:1e:
         bc:56:c8:a8:b7:da:8d:85:5e:67:ef:30:b8:42:df:a1:e2:f2:
         a3:66:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:52 2025 by rpki-client