Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa
File:                     ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa (raw, json)
Hash identifier:          SYLjeCEgRLlz+XloibR7GPOpROWs3KB/IlpHgs931wU=
Subject key identifier:   ED:4C:33:6B:C3:63:02:E4:4E:7E:23:1E:D0:F0:F3:1E:D3:3B:F0:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1832349374DB7F6B68000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     20362
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:83:23:49:37:4d:b7:f6:b6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=99f0db7e-5a36-46e4-82c4-a96cad78180a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:e9:46:91:b0:a2:22:47:57:2b:58:07:dd:
                    a3:85:aa:6c:63:fc:bd:8f:cb:33:9a:1f:80:54:cb:
                    d8:2f:5c:22:3b:25:87:59:33:77:b1:39:df:0d:2f:
                    21:62:76:13:fe:ee:71:4b:16:27:fd:9f:57:ec:4e:
                    64:8b:1f:58:d0:bd:72:45:fb:40:9c:c2:a9:4a:d9:
                    fe:92:50:5e:f3:e7:50:5d:3d:71:fb:9d:fb:5d:d5:
                    b3:4f:3e:5c:a5:4b:91:ec:3a:44:ed:06:09:bf:c0:
                    20:df:2c:b8:77:4a:41:8a:05:8e:07:8f:db:ff:f3:
                    bd:49:a7:d8:f7:35:22:ca:fe:9f:96:9a:83:52:31:
                    9e:ab:d6:26:a7:52:6f:42:ff:a2:ac:fa:82:8c:4b:
                    39:43:4d:43:d7:c4:d0:56:0d:72:69:a8:db:eb:ee:
                    9d:6e:49:cf:4b:28:b4:5a:62:6f:3e:71:78:24:74:
                    5a:c9:df:d1:46:17:a4:7a:b1:b2:42:82:a6:b9:8f:
                    1b:79:aa:82:8a:1b:74:4d:ca:f9:b1:57:bb:6a:10:
                    f1:22:b9:23:ac:68:1a:41:5d:c5:c5:e7:79:84:72:
                    cc:62:56:0c:7f:34:1a:20:2a:c5:ab:44:a7:ea:8b:
                    c4:df:34:ea:32:36:1a:f1:d2:39:b5:8f:d4:7d:74:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:33:6B:C3:63:02:E4:4E:7E:23:1E:D0:F0:F3:1E:D3:3B:F0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:1f:47:28:b8:a5:b6:db:4d:25:ac:f6:92:6b:9c:65:05:
         27:5e:fc:4a:14:92:2d:ed:89:5c:e7:3b:f6:1d:5c:db:a3:55:
         2c:b8:ff:94:e0:f3:da:97:d9:91:cd:c7:a3:e0:a8:89:2f:88:
         35:c4:a2:8f:40:7a:e1:b1:8f:64:39:c4:ef:05:56:3b:c5:f3:
         57:8a:eb:bc:9a:a0:55:63:fd:e0:7d:fb:63:61:66:9b:56:39:
         6d:f5:43:ef:47:79:fd:9a:bc:11:dc:5d:57:d0:af:e8:a0:13:
         8a:a5:3c:57:6b:02:39:48:8d:9f:75:e8:38:1f:bb:43:9a:a5:
         cc:33:69:39:77:1e:72:f5:42:ad:29:d2:e4:7f:43:16:c2:c3:
         aa:19:fd:b9:69:95:0a:d0:4f:41:2e:7e:6e:33:f9:10:d2:b0:
         28:ba:4f:a5:e0:1a:67:97:60:49:e1:e3:3e:38:9b:8e:83:5a:
         e3:28:3a:f2:19:ab:2a:04:f5:39:41:22:c6:49:1b:5e:8e:59:
         bf:2b:2a:4d:c5:46:fe:37:11:51:01:ce:5d:d0:3a:1a:3d:66:
         f4:6b:86:c2:fc:de:22:77:b3:30:e9:84:9f:74:db:ef:97:fa:
         62:92:61:58:2a:1c:db:d0:79:35:aa:9d:c2:bf:15:82:14:26:
         af:b7:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:01 2025 by rpki-client