Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94493d3-6ce4-3bc2-bcd5-7da3e0acad24.roa
File:                     b94493d3-6ce4-3bc2-bcd5-7da3e0acad24.roa (raw, json)
Hash identifier:          rJzbkuP2SshjC+ysPIxEAmAZowrdEMOYhNb5S7v/mfQ=
Subject key identifier:   8A:7C:81:EB:9E:F2:03:39:63:0E:6B:33:8D:DD:46:D8:3F:C4:CE:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9B50037A8E032E3EC800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94493d3-6ce4-3bc2-bcd5-7da3e0acad24.roa
Signing time:             Wed 20 Aug 2025 14:37:01 +0000
ROA not before:           Wed 20 Aug 2025 14:37:01 +0000
ROA not after:            Tue 18 Nov 2025 15:37:01 +0000
asID:                     40717
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9b:50:03:7a:8e:03:2e:3e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:01 2025 GMT
            Not After : Nov 18 15:37:01 2025 GMT
        Subject: CN=da6e2abf-97ab-487d-96d4-1c94fa247ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:fc:c6:41:78:1f:1a:d9:fa:10:6b:97:70:
                    c8:06:cf:61:80:41:a2:f6:08:a6:fc:b1:ad:2d:d2:
                    d5:e1:bc:78:b0:f0:90:a6:cb:34:8e:57:4f:3a:5c:
                    f9:0b:b3:6d:3b:0c:1f:71:84:53:d8:24:18:a3:b7:
                    67:9e:9c:52:53:5c:07:11:77:0d:3b:db:4e:c6:df:
                    db:80:ab:0d:a5:c8:ae:67:bf:de:2c:d5:17:8a:56:
                    55:35:44:17:e8:cd:3b:f9:f3:26:3f:39:54:01:c9:
                    b2:82:44:ee:71:04:d5:ce:c9:89:8e:22:b6:d6:fc:
                    cd:22:ec:0a:91:40:38:7e:20:e7:9e:a7:99:0f:14:
                    ca:40:fb:f1:21:71:05:e1:23:da:7e:ff:89:cf:58:
                    2d:36:79:32:a1:9e:87:0e:c7:10:ff:8a:46:2b:c0:
                    9d:2b:d0:09:a3:5c:f5:93:9e:0e:4c:bc:68:b2:87:
                    d9:8a:58:ee:f9:35:20:14:1d:db:89:83:bc:82:6b:
                    7c:3c:53:3e:0f:a2:7e:e5:07:14:ec:5c:76:96:9e:
                    59:a5:15:82:a1:15:65:5f:ee:2c:d2:cf:66:9b:65:
                    be:47:37:c1:2b:fd:23:97:05:03:68:39:d1:c3:6f:
                    9e:09:bd:e6:00:e6:4c:b9:bc:16:2f:15:da:60:e2:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:81:EB:9E:F2:03:39:63:0E:6B:33:8D:DD:46:D8:3F:C4:CE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94493d3-6ce4-3bc2-bcd5-7da3e0acad24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:31:c0:d5:42:dc:1f:0e:06:6b:94:ac:33:98:ec:1f:9e:fb:
         1c:02:fb:39:5e:d2:73:bb:01:e2:f0:40:77:7e:61:09:e6:d3:
         69:15:3b:1e:2a:9a:5c:52:b1:1a:ae:c1:97:f2:cf:07:3b:e4:
         70:23:d5:09:37:0f:3a:e7:dd:d2:32:16:a9:8b:d2:fe:db:15:
         8f:7f:d7:5a:d3:23:7f:e5:fb:f8:59:f8:0e:1e:45:00:15:bf:
         51:37:e4:cd:cf:50:b4:76:72:3d:d2:ad:7b:3f:f2:0f:66:94:
         23:0d:02:30:9f:db:60:13:4e:d7:fe:55:f2:b1:49:93:6f:a9:
         16:5d:3e:13:dd:17:48:74:40:b0:10:f0:8c:86:02:3c:cb:a3:
         ac:19:a9:25:0b:6d:a3:d6:b5:89:1f:9e:2e:00:12:04:81:18:
         3f:73:8c:10:d6:ad:07:54:0a:94:ff:f8:d9:58:b5:fc:a9:98:
         e0:35:d1:23:8b:ec:b9:61:f3:e8:12:7c:ec:27:a6:b1:48:d3:
         8a:5d:88:bd:6a:3b:4d:22:02:ec:59:bb:d5:64:72:44:22:0f:
         c2:45:7b:cf:2b:fc:22:74:8f:5b:da:b6:54:86:01:70:2d:99:
         8b:0d:ca:a8:f2:4a:d2:36:1e:3b:c4:ca:e8:06:7b:82:f5:0c:
         e5:e6:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:06 2025 by rpki-client