Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa
File:                     fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa (raw, json)
Hash identifier:          ASCK3mlPJF5LL7Hc6gQfEMF5rNVeEx+NrHcIEmpbfpw=
Subject key identifier:   16:C1:5A:E2:37:9D:B3:03:24:C1:8F:74:C3:18:08:AD:C0:D9:C6:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081CDE5E80FFC270E7FAA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396602
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:cd:e5:e8:0f:fc:27:0e:7f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=11826644-795e-48e0-8608-bba8bf7e6e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:15:00:ad:bc:5b:75:c0:db:60:fb:a2:bd:
                    ed:d2:93:13:24:0c:02:bc:21:e7:30:c0:75:c4:17:
                    1b:95:12:1f:1b:43:8b:01:65:d6:1e:b5:ba:38:a7:
                    ea:02:36:98:f4:5f:63:30:ff:84:d3:59:d7:f1:5d:
                    a3:de:95:75:52:cd:e7:85:86:3d:10:5c:23:4c:3d:
                    82:82:bc:63:a3:a5:63:fc:fe:98:c6:a4:e5:2a:f0:
                    84:e6:80:3f:8d:b5:73:89:fe:4b:7a:2a:1b:ac:af:
                    35:18:0f:45:70:73:69:3d:65:06:1c:a9:6d:a9:f6:
                    ad:0e:45:f5:8e:61:b3:62:e2:8f:7b:e9:53:9f:52:
                    81:9d:5e:5d:9f:52:45:88:82:26:10:37:09:6e:42:
                    f1:b1:4e:17:d1:71:f6:49:5d:73:38:e8:5f:60:2e:
                    6d:3b:b4:89:c5:64:72:e0:19:53:f2:6c:90:38:ac:
                    3a:07:cf:85:94:2e:b3:b3:db:8d:68:6a:ad:1e:08:
                    33:44:8d:83:7f:3c:89:b5:14:51:89:ef:4a:77:42:
                    0d:4c:11:41:ba:75:c5:08:5d:f0:e6:7d:37:89:8e:
                    17:a6:db:22:f3:09:28:93:76:11:c8:a5:48:ca:b9:
                    1c:c5:78:86:cb:bf:50:62:44:c3:11:c5:55:28:0b:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:5A:E2:37:9D:B3:03:24:C1:8F:74:C3:18:08:AD:C0:D9:C6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:81:2c:c4:af:9d:b1:8c:0a:a9:14:1c:c7:83:bd:70:cf:
         54:bd:97:d4:f2:da:21:e2:97:ff:97:c6:1f:d1:31:5a:8c:e2:
         02:5c:e7:be:16:0d:7f:cd:d7:61:b5:82:8c:03:12:c6:24:b4:
         76:c2:ed:38:c2:62:ad:44:12:47:21:f5:ae:6b:95:f2:87:2c:
         88:56:da:c3:7a:82:88:04:aa:4f:b7:6e:d4:a2:67:f7:82:57:
         e0:39:18:db:1a:9a:23:03:98:61:e1:cc:bb:96:07:0f:90:73:
         07:c5:0d:48:81:04:5f:0e:5b:76:6d:20:36:94:c5:0b:bc:44:
         bb:19:d2:68:d5:dc:d4:f0:7c:d3:a7:99:f9:0f:33:19:72:0d:
         11:e1:47:71:ac:4e:1b:2f:3b:f8:6a:1b:61:30:72:ca:c0:b7:
         65:12:09:f3:a8:95:12:69:8f:73:fb:2a:07:96:2d:dc:e0:ed:
         01:2d:0c:29:c6:b1:ed:18:16:62:e8:38:a2:9f:ad:7d:f8:fb:
         e9:45:d8:89:82:c1:9b:5c:f5:88:b2:7f:81:8b:4a:aa:11:04:
         97:a7:ec:c6:d8:2c:93:01:c1:7e:12:a7:7d:f5:c9:4e:7a:0d:
         e4:76:1c:a7:40:e7:24:43:6d:9f:77:76:e9:f0:83:63:3a:24:
         fa:53:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:25 2025 by rpki-client