Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9a61939-98bf-30c7-b000-94328093c5f8.roa
File:                     b9a61939-98bf-30c7-b000-94328093c5f8.roa (raw, json)
Hash identifier:          uDjn1vl3fUUNP96jmBtRQ4cGn6owZwqvP4jATbBe+bY=
Subject key identifier:   F3:78:9F:19:58:E6:4B:AD:79:58:79:A2:05:4C:FB:D6:DD:19:DB:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD0737ECE812B053D9240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9a61939-98bf-30c7-b000-94328093c5f8.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396609
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d0:73:7e:ce:81:2b:05:3d:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=6c0f51ef-ad36-4732-a5fc-0a460667b575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:fc:67:8b:1c:69:22:ee:01:f9:30:0d:53:
                    58:18:2f:75:93:08:51:34:76:e6:1e:39:c8:bb:02:
                    a8:12:7f:e0:a2:72:27:7a:84:0e:44:44:55:f5:34:
                    a4:88:31:0c:a5:01:ba:29:b3:16:d0:50:54:db:b1:
                    69:83:76:05:f1:b6:16:5d:8a:57:08:58:02:00:b3:
                    08:b9:fe:6d:56:6d:32:92:3d:bb:83:13:8a:cc:07:
                    e4:80:97:8b:46:fe:cd:bb:04:cb:d3:f2:b1:9e:5a:
                    e8:a6:82:7e:2e:c2:e5:a4:cd:50:98:2f:a5:31:b7:
                    97:96:9c:5d:e0:11:cf:da:e3:1c:1f:d0:73:9d:7b:
                    9b:b4:d0:0b:84:14:63:7b:99:13:b6:0f:a9:70:6e:
                    9a:c5:05:ae:39:bd:bd:83:d1:ee:cb:af:b9:0f:52:
                    85:d3:df:ed:2f:70:06:1f:da:11:4a:51:05:5c:36:
                    d1:9b:64:7e:8e:0d:12:4a:60:fc:5d:2e:0f:11:19:
                    08:f8:a1:1f:df:70:92:87:07:9c:21:de:44:ab:f4:
                    49:ae:b0:ee:22:1e:f7:b9:55:12:20:b5:08:05:eb:
                    48:5a:f7:bc:5c:bd:3a:cd:3b:88:8a:2b:81:df:8a:
                    af:c1:be:5f:c6:48:da:95:f8:8b:8b:f4:da:00:62:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:9F:19:58:E6:4B:AD:79:58:79:A2:05:4C:FB:D6:DD:19:DB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9a61939-98bf-30c7-b000-94328093c5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:ec:c1:72:c3:c5:b8:f0:44:62:12:24:32:a0:d9:1b:84:
         2e:77:aa:49:af:66:3f:9f:6f:3e:20:d1:9c:ce:0f:ee:d8:22:
         3d:ab:77:fb:33:5a:99:12:50:68:e7:9c:a7:46:04:34:27:b8:
         c4:c4:b3:4a:04:15:12:53:5c:89:eb:2e:ec:8d:10:f6:77:4a:
         a4:86:fe:18:02:80:52:69:d6:67:ea:e0:3e:6f:53:8c:78:8e:
         87:42:f1:71:ba:96:2d:fa:45:8a:f5:fd:a9:79:e7:ab:15:7f:
         7c:d5:80:08:56:ed:45:09:6a:b6:ca:a3:a2:08:fa:56:00:24:
         2b:80:be:2a:0e:95:93:e7:a5:af:4a:25:19:c0:41:7e:83:d5:
         db:a8:0b:d3:b9:5c:63:19:f8:36:63:06:63:c6:7d:7a:29:d2:
         ea:4a:5c:fd:d4:4f:29:78:90:71:63:22:7a:0e:33:41:c5:a6:
         44:64:74:9e:a3:00:46:51:4b:c6:73:43:4e:cb:a6:83:cc:a9:
         78:0b:0b:24:bb:9d:b8:5b:9e:dc:30:f8:3a:c3:b3:bb:32:07:
         39:93:08:c2:a7:2c:07:ed:cd:3f:f2:c2:f4:46:ec:65:68:ff:
         cb:0a:ab:31:e4:da:25:bb:3e:73:7e:5c:8b:70:87:f2:23:31:
         1e:9a:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:29 2025 by rpki-client