Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa
File:                     d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa (raw, json)
Hash identifier:          6bUzLkabT3TSXNfFmemHA05wrHwKEP4fD6ZGBBpJsYk=
Subject key identifier:   F5:A7:86:72:75:05:6B:1E:F3:D0:83:D2:A8:BD:41:65:D1:DA:4E:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67A024130CD8574ADE280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396615
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7a:02:41:30:cd:85:74:ad:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=4f060690-c7c3-4786-a155-5252cc2e1e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:ca:bf:3d:fb:42:2f:ef:cf:49:a9:88:b7:
                    22:c4:bf:24:40:05:d1:86:1f:d8:bb:df:a9:f6:11:
                    b0:aa:70:15:10:e7:68:00:70:d3:20:22:01:32:41:
                    bc:dc:7d:b4:6d:99:68:fd:45:b0:e2:94:8c:a8:95:
                    5c:f6:c3:32:df:4a:3b:21:be:af:84:30:74:89:17:
                    66:a5:41:f0:1a:9f:6d:4e:f8:f8:8d:c7:4d:87:09:
                    4c:3a:ca:ca:09:b0:e3:6a:06:f8:3f:ec:70:db:3b:
                    20:fb:04:03:58:b5:fd:a3:10:34:1c:57:ae:15:c3:
                    df:8e:30:c0:29:24:ab:8d:04:19:2b:56:17:c0:dc:
                    2c:2b:04:d6:f3:e5:73:22:25:00:12:31:c5:4c:97:
                    9e:95:e1:57:48:56:14:bf:db:4f:1d:bf:05:4a:7d:
                    b5:38:a1:34:35:1a:49:7c:ef:ce:78:b6:4d:4c:bb:
                    33:f6:da:2e:f3:a7:b7:2a:41:27:5d:cb:19:b2:2b:
                    09:23:05:c9:2b:63:a9:29:e1:1e:05:ce:f9:6d:c5:
                    96:ee:d7:07:96:9d:a9:52:75:ae:a6:25:ed:8e:87:
                    dc:98:00:00:25:75:8f:3c:8f:0f:04:b1:0c:fe:0c:
                    dc:af:95:4d:cd:56:c1:94:3f:9a:b9:70:94:47:81:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A7:86:72:75:05:6B:1E:F3:D0:83:D2:A8:BD:41:65:D1:DA:4E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:22:ef:4c:09:91:5d:3f:82:fa:76:6e:7a:32:9f:5d:47:45:
         a7:92:e9:5b:b9:a3:3f:ce:5a:51:24:c8:39:a9:54:03:03:0e:
         dc:1c:63:01:df:11:55:ca:be:73:f2:be:bb:23:64:53:e4:86:
         55:ba:41:83:ef:1c:24:d0:88:4e:ae:7e:e7:d0:da:57:e5:9d:
         8d:d8:ca:4c:6e:37:0e:26:17:e2:9e:ac:b0:bc:04:68:95:b1:
         23:71:11:8d:ad:a3:25:17:c3:11:09:b5:c5:2c:32:06:7c:63:
         bd:36:bd:c8:72:8f:f8:06:9d:db:72:b8:f7:21:7b:ab:51:b0:
         0f:4b:2b:c4:34:9c:f9:9b:d7:ad:c9:6f:78:67:33:4d:11:72:
         8c:7e:ef:d2:95:8e:a7:dc:5a:36:e9:a7:7a:e0:31:2b:1d:83:
         4b:06:01:0b:79:7e:34:7d:6b:b9:65:e8:8a:3c:a5:c8:a8:ac:
         ba:c2:8d:be:69:85:a7:ff:35:66:93:d6:2a:55:e5:51:b5:db:
         66:63:93:03:5d:f4:0e:74:bc:56:15:67:46:5a:6a:94:3d:19:
         4c:18:aa:30:7d:e1:e9:72:53:d4:eb:c7:f8:10:3b:06:4a:f2:
         19:fa:97:9b:81:8c:34:66:c3:89:c7:4f:88:f6:2e:fd:71:59:
         3c:ff:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:19 2025 by rpki-client