Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa
File:                     e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa (raw, json)
Hash identifier:          u8KzPNTPh9kcMok9a9kmlrXsx+6/YZLOuC1LcqpVdYg=
Subject key identifier:   1A:E3:76:4B:19:15:D2:34:C7:61:85:2A:A2:14:40:B0:C4:09:3D:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D28BD3E368EFDABE2380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20172
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d2:8b:d3:e3:68:ef:da:be:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=5987007b-e36e-464e-b627-37289b2bc927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:98:e5:fa:e1:f0:0e:4d:45:99:db:0c:ec:
                    4e:ab:94:14:f9:46:c7:ae:1b:4a:f1:f0:a8:5a:db:
                    34:6f:e9:46:9b:c4:8e:a9:83:b1:49:0a:8a:6f:5e:
                    70:9c:74:a1:3d:e7:a8:b1:d0:f0:be:d6:81:5f:46:
                    69:e9:c7:8f:53:5f:96:d6:3b:5e:13:e9:08:a5:24:
                    52:12:17:67:2e:8e:f7:44:07:64:92:42:93:37:20:
                    4a:a0:75:2c:67:eb:cf:83:d6:f1:13:c1:0c:26:ad:
                    a3:69:36:6b:e2:a0:53:b9:af:30:7c:fa:12:65:71:
                    12:03:02:12:9a:2d:10:1a:91:71:9b:5c:b6:5a:03:
                    4b:eb:9c:2b:dc:42:7e:52:4e:1a:f9:03:fb:01:db:
                    86:d6:2d:97:35:92:75:fa:ee:67:8e:23:2a:95:24:
                    ed:f2:58:63:1c:3d:42:6d:6b:45:bd:47:70:79:81:
                    c3:64:53:64:c7:fb:3d:4b:33:62:6c:76:b2:d0:a9:
                    55:95:55:04:ac:4c:60:e0:99:84:c5:3d:ba:f9:2e:
                    b4:3e:75:bc:d5:d6:28:6c:03:f8:1d:eb:0b:38:25:
                    d7:cc:cd:0f:1e:03:2c:dc:d7:f5:de:ee:48:38:cf:
                    dc:60:dc:44:92:e8:ce:64:87:2d:68:c7:9e:8f:01:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:76:4B:19:15:D2:34:C7:61:85:2A:A2:14:40:B0:C4:09:3D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:79:82:6b:ac:d1:57:8e:c8:7f:7b:f2:1d:77:8b:05:ab:26:
         30:36:e1:ea:b0:2c:50:aa:84:b3:eb:ba:3e:9a:1c:11:f3:c0:
         35:e7:16:bc:e0:d1:0f:b6:6e:72:7f:28:16:db:d5:2c:85:65:
         b6:fd:cd:04:f6:48:02:3b:5c:4f:b6:e9:0a:d8:85:67:85:0c:
         f9:d8:cc:57:54:42:ac:02:18:77:69:b5:e8:40:23:84:96:e0:
         ef:45:33:37:02:bc:37:e0:37:7b:14:dd:20:16:a6:2b:d8:87:
         1a:5f:2b:24:7c:93:da:87:22:35:ee:f7:3c:f5:cc:80:79:28:
         4d:12:ac:03:00:17:b7:f4:12:84:92:19:80:06:bd:4f:51:68:
         a0:41:b0:7b:d0:81:8b:18:09:27:84:77:ae:7e:e3:78:d3:97:
         a6:e8:df:c8:d7:b4:a6:8f:4b:75:c1:50:5c:81:93:ad:a5:6a:
         01:65:f6:aa:7f:f9:9c:f8:69:13:4b:80:f3:6b:e3:1f:3b:9a:
         a3:fe:cb:90:8a:9d:2e:b5:73:53:76:79:3f:54:1a:f5:e8:8d:
         10:95:b2:53:d1:5d:2b:f8:38:23:49:9d:1c:11:76:47:e5:14:
         6e:c9:01:d5:9b:49:15:35:76:28:2c:8a:2c:03:b6:b7:56:43:
         02:44:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:59 2025 by rpki-client