Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
File:                     f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa (raw, json)
Hash identifier:          OOVPVml0o6Mr3accLNoUsPNkbmhHkoqSWubxxjocS6c=
Subject key identifier:   3A:5E:3D:B8:45:2E:A7:CB:60:0D:81:10:06:90:84:B1:A8:96:56:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC183363AD4B13AD1C8D8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     20431
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:83:36:3a:d4:b1:3a:d1:c8:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=7eb46b24-101e-4d89-820e-96773b145a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:bf:45:a5:ab:50:5f:fa:0d:a3:e2:9a:e2:
                    cb:fd:db:a6:a8:7a:78:e3:74:bf:2f:ca:4c:b2:29:
                    75:a3:bb:7e:b5:83:8f:ef:ac:c4:17:b9:2f:e7:bf:
                    2c:a5:44:e1:81:ca:e9:64:aa:21:27:ee:57:8c:c2:
                    60:a4:ab:c8:f3:dd:69:a6:a7:66:a4:3f:66:eb:b5:
                    7d:9b:f0:75:be:5a:02:7d:43:dd:ea:cd:1f:e1:9c:
                    fa:c6:10:a2:76:97:c8:89:cc:82:7a:4e:17:12:76:
                    f1:95:74:f2:29:fc:a3:22:e3:5d:ef:98:23:ab:e4:
                    05:eb:d2:89:a7:a1:b3:02:9f:cc:f5:a4:31:5a:25:
                    92:88:c2:50:cf:23:cb:82:72:ae:d3:f5:4a:ab:96:
                    b6:00:bb:64:2e:f0:29:28:c7:b2:3a:33:8d:72:97:
                    5d:43:be:0a:b8:30:5f:f4:91:7e:ce:4a:53:e1:22:
                    07:7d:b3:ea:34:f5:2d:a6:ad:9a:1f:40:2e:81:b7:
                    d3:d1:20:b7:1d:3c:f9:82:ae:4c:f5:a6:ec:1f:1c:
                    bc:c7:88:52:36:99:69:cb:d7:84:f5:4e:65:70:86:
                    91:9e:03:07:d6:cf:2f:90:e1:0c:2d:1a:2a:26:9c:
                    d3:d2:67:d2:84:c8:58:4b:dc:f9:ae:4b:62:b1:87:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5E:3D:B8:45:2E:A7:CB:60:0D:81:10:06:90:84:B1:A8:96:56:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:2a:5b:f9:95:ab:68:17:81:16:1b:11:85:39:d6:75:1f:
         42:ba:4e:a4:f7:44:d4:05:fe:ee:74:23:6d:9c:14:95:e9:91:
         a7:6d:a9:b2:d2:7f:2e:c8:43:64:26:96:f1:57:e6:80:c1:d2:
         5a:c6:16:a4:34:41:c4:3b:d8:72:44:a7:83:13:5e:bb:1c:b9:
         04:d8:65:aa:ca:a3:d6:b8:a1:1f:d7:c5:7e:c2:b9:3e:01:6e:
         cd:44:d6:51:3d:59:36:08:1d:83:f3:91:31:ee:77:27:1e:92:
         18:ec:f9:64:91:6f:e4:49:0d:ca:03:80:49:b0:db:50:c1:e2:
         6d:34:e7:3b:fc:88:74:e4:a4:98:55:8c:a1:fa:9c:3f:ff:4f:
         9c:69:56:fb:c5:55:bc:a3:8d:1f:e3:bc:34:e7:76:fa:f8:dc:
         41:cb:14:ab:bd:00:16:a8:f6:eb:df:85:92:f5:87:c0:10:aa:
         0f:ea:d4:6b:d8:52:10:8d:f4:52:d6:ab:aa:e7:f1:a6:17:70:
         9a:08:89:2a:87:51:42:15:cd:f5:7b:c3:4d:8b:ed:da:d8:21:
         8b:31:f2:43:d9:b1:c9:cc:59:b8:f4:8d:ae:f0:d4:97:42:d1:
         35:b4:1e:32:d1:1c:c9:19:7f:c5:64:50:4a:dd:6e:03:93:4b:
         64:35:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:10 2025 by rpki-client