Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b99d1deb-7f02-3e63-8132-0d7e613e54a7.roa
File:                     b99d1deb-7f02-3e63-8132-0d7e613e54a7.roa (raw, json)
Hash identifier:          6H6AwS1WtEPk3Ez9xjSkF6hgv4g652xKkKxLUtdjbKY=
Subject key identifier:   1C:62:E0:17:EB:0D:09:9A:42:D2:A7:B0:AF:DE:11:C5:9F:50:36:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B8B27C4AB4001A3F5E9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b99d1deb-7f02-3e63-8132-0d7e613e54a7.roa
Signing time:             Wed 20 Aug 2025 14:36:53 +0000
ROA not before:           Wed 20 Aug 2025 14:36:53 +0000
ROA not after:            Tue 18 Nov 2025 15:36:53 +0000
asID:                     396587
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:8b:27:c4:ab:40:01:a3:f5:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:53 2025 GMT
            Not After : Nov 18 15:36:53 2025 GMT
        Subject: CN=def9db47-3273-494c-a474-8a321660a3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:99:e4:5f:6c:9f:bb:c1:a1:71:c5:22:c8:
                    23:0e:6c:14:b5:55:7b:3e:71:a9:c8:23:b9:42:c4:
                    e1:bc:ba:1f:a0:d9:6b:a0:8b:86:75:70:c4:82:fb:
                    0d:95:29:4f:23:69:40:09:21:98:7c:48:39:5d:40:
                    d7:78:56:31:14:a0:9d:d6:75:6a:c6:bf:0f:9c:42:
                    6b:0b:29:88:8d:fc:a1:33:52:c0:83:2f:90:93:db:
                    42:7c:26:8a:e9:dc:09:86:67:29:9e:1f:57:94:8c:
                    62:ff:53:49:fc:13:a0:71:3b:3f:e1:cf:0c:d7:21:
                    2a:a6:2c:dd:79:9e:23:c5:5f:d4:e8:69:bc:a0:8e:
                    71:3f:47:f7:4c:6c:1c:ff:33:92:01:67:a4:e5:d0:
                    ad:00:8f:6a:b4:14:bb:31:bf:2d:cf:f4:ac:49:29:
                    bf:a2:39:88:f0:68:6d:68:d4:ab:ac:3c:73:7d:d5:
                    ca:c3:e4:29:8f:53:ce:26:fc:5f:12:6e:fc:2f:d0:
                    54:a7:c8:d2:5c:6b:87:48:f0:05:4c:01:b0:35:b0:
                    be:92:e3:27:20:23:84:0b:d3:2a:3f:4e:da:97:06:
                    d2:dd:21:70:a7:30:d9:60:b6:41:3f:8e:3e:e3:c3:
                    bc:fb:0c:ea:2c:82:56:71:22:a1:d5:ad:bb:82:2a:
                    75:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:E0:17:EB:0D:09:9A:42:D2:A7:B0:AF:DE:11:C5:9F:50:36:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b99d1deb-7f02-3e63-8132-0d7e613e54a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:25:8a:f1:d0:2a:e8:0d:25:71:1e:d6:33:b9:38:64:3d:
         18:46:92:79:ae:59:82:02:05:bf:50:22:54:03:c6:24:65:85:
         6b:11:14:b8:5c:24:89:63:07:58:8f:78:96:b0:22:d1:f3:78:
         80:3d:67:97:32:9d:ae:53:96:c8:b5:3c:9f:bd:3b:8c:e3:b5:
         89:d6:26:30:86:7f:fe:25:f0:7e:8f:a3:e7:fd:d9:44:bb:27:
         53:9b:e5:3d:ca:ce:10:eb:23:b6:f0:c8:d7:48:c6:25:81:aa:
         9e:53:88:b2:c3:ee:c1:c4:92:21:e3:b5:c5:f0:9f:35:47:63:
         af:e2:aa:52:01:7c:5a:40:40:8c:a9:ad:98:22:69:6a:32:7b:
         77:d0:e2:41:3f:0f:ef:e3:6e:64:e4:da:4d:6a:25:20:a2:24:
         92:73:06:31:98:38:fc:d3:a9:13:d2:d4:c2:8a:69:6d:93:4d:
         c1:0b:96:62:fd:a5:79:f5:1e:ca:35:fc:46:6d:dc:49:45:fe:
         95:26:e5:1f:11:3c:65:83:9c:1c:39:90:8c:64:b0:d0:70:3c:
         09:24:06:1e:5e:6b:08:c6:15:4b:65:1c:1d:40:24:d2:64:e4:
         53:b8:ad:ae:f8:87:58:42:2a:23:86:e5:d9:7e:8a:18:22:23:
         66:ce:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:50 2025 by rpki-client