Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa
File:                     bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa (raw, json)
Hash identifier:          rQ3C2/sBorWPW50C40pmW3EtZvTBzQoWDYA1LuZoaUM=
Subject key identifier:   49:2F:E1:A8:44:87:DE:9D:CC:B5:0B:D5:6E:19:26:6E:7D:BE:EE:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A7874C5D72E772BC06A900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     396617
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:87:4c:5d:72:e7:72:bc:06:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=6dd10a6c-ac0a-4f41-97bd-5c5ae8ff2090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:9f:73:69:26:63:fd:39:89:42:88:0a:01:
                    39:ff:02:e5:12:f2:96:16:c6:bd:4a:a3:8e:70:9d:
                    49:e7:77:96:72:3e:57:7f:75:7b:88:f9:17:f3:05:
                    67:12:01:71:da:cc:df:d4:67:41:d0:a4:fe:a3:ca:
                    eb:09:71:64:fe:e6:e4:52:ac:14:3f:6f:44:fa:f9:
                    71:76:d2:d8:15:7e:83:4c:b5:4d:a5:60:5e:3f:61:
                    21:93:3e:a7:5a:36:a1:cf:81:34:19:25:0e:89:15:
                    62:e0:73:48:75:10:c8:ff:68:7d:a0:a7:78:d7:a0:
                    ea:4f:10:8b:ef:90:46:09:47:b5:9e:87:05:cb:01:
                    83:f2:4c:4e:0f:b0:b4:df:9f:dd:46:05:55:1d:a3:
                    1c:a1:51:a8:e7:39:93:47:55:30:c4:2e:cc:a1:90:
                    b0:4f:d3:b8:7f:cc:5d:9f:fd:aa:c3:f9:e1:f6:e7:
                    e7:b0:9f:de:98:de:7c:c0:7b:ba:fe:10:cc:97:7e:
                    f5:36:f8:08:9c:2c:ce:76:3b:4b:a7:98:7b:18:04:
                    c1:62:39:00:f8:3c:0b:2b:08:45:56:65:55:16:f7:
                    da:80:dc:9d:04:e7:bb:e4:14:09:e3:57:03:70:a2:
                    c0:de:e6:60:32:37:d2:51:80:7f:b8:eb:88:ca:db:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:E1:A8:44:87:DE:9D:CC:B5:0B:D5:6E:19:26:6E:7D:BE:EE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:18:95:2f:e3:84:21:74:e4:4e:e5:59:6a:c2:08:76:9b:b4:
         3a:1b:c7:51:5e:9e:86:6c:08:6b:5a:f0:8d:20:75:38:44:18:
         c1:d5:f1:4e:34:c8:77:ea:e3:ad:2d:0f:e9:80:0d:dd:82:d2:
         9c:af:9f:11:5b:32:47:c4:96:82:d9:2d:e6:ea:ca:99:a8:92:
         ca:61:3d:8e:ce:97:b3:83:16:3a:4f:48:02:f9:1f:21:5d:c9:
         d5:1c:e5:6b:8b:0f:2e:39:49:65:58:28:36:e6:91:da:8a:6f:
         33:ee:4d:c5:a7:63:6a:e8:66:f5:0a:86:76:f6:ab:9f:d1:0b:
         39:49:f1:fc:05:36:22:9c:d5:81:03:8f:1c:d6:a3:03:1c:b2:
         4c:0d:f8:64:d0:32:39:45:54:0c:a0:da:b7:25:ec:69:68:9f:
         13:2b:28:0f:f4:17:c8:a6:cf:33:bd:74:2a:22:95:0e:93:60:
         f9:01:93:7a:c0:89:d4:50:6d:a7:23:df:9f:c1:c9:50:67:5a:
         e2:3c:48:59:57:14:81:12:3d:f0:00:65:55:df:6d:ad:7c:ff:
         51:2a:6e:26:15:1f:3d:39:ff:9a:a9:41:05:9d:71:91:6c:56:
         13:0e:7b:4f:b8:f3:06:18:24:32:98:e0:35:fd:5c:e3:9a:2d:
         f3:cd:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:46 2025 by rpki-client