Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
File:                     fbae4126-4d48-32ac-beb7-429581920c17.roa (raw, json)
Hash identifier:          uz7S+3XJO7vFC/0M423/urGRrVRasLKKigcreYjHhRw=
Subject key identifier:   E8:67:31:0F:3D:02:86:9F:87:38:EE:20:7A:7E:EA:C2:43:4D:08:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEE17C492999F378F67AB4B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
Signing time:             Thu 21 Aug 2025 12:31:02 +0000
ROA not before:           Thu 21 Aug 2025 12:31:02 +0000
ROA not after:            Wed 19 Nov 2025 13:31:02 +0000
asID:                     396563
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:17:c4:92:99:9f:37:8f:67:ab:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 12:31:02 2025 GMT
            Not After : Nov 19 13:31:02 2025 GMT
        Subject: CN=51c12ac3-8ef2-4dd2-9431-10de5a2e9e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:01:fd:4e:90:5c:6a:24:e1:ad:d5:83:cb:
                    06:9f:44:02:dd:d6:ad:0c:08:b8:be:d8:ab:f6:cb:
                    72:ae:bb:bf:2b:b7:92:81:cc:1d:da:4a:8d:c4:0c:
                    dd:34:9b:2a:48:39:70:7b:9f:f8:b5:d9:0e:db:14:
                    c8:ba:9b:df:19:21:0c:44:96:1e:db:f4:8e:a5:19:
                    e9:54:f5:10:33:6e:67:21:8a:2f:2a:dc:96:9b:bb:
                    a6:9c:b7:e6:51:21:36:00:2d:b2:62:46:6e:4b:fc:
                    70:25:db:7a:71:23:e1:01:2c:e6:61:df:3e:39:ac:
                    40:0b:63:7c:80:08:0d:f1:16:13:2e:b5:2b:c5:a3:
                    b6:66:58:51:06:dc:8c:a8:de:2c:ee:56:0c:b3:af:
                    c2:35:fe:24:9f:99:a5:64:4f:a9:6a:cc:c4:48:a1:
                    39:aa:ed:4a:62:be:9b:1e:95:3a:60:cd:c0:3e:be:
                    fb:7d:c7:09:b4:37:0d:3e:e0:df:3d:5d:df:8f:8b:
                    dd:88:33:c3:3b:29:9e:62:11:f2:23:c0:0f:ac:01:
                    a6:2d:bd:55:a8:c8:5b:b3:b5:eb:8d:5b:36:f4:9e:
                    4c:5b:94:f7:e0:17:59:7e:1a:4c:13:97:16:d9:68:
                    34:53:66:73:df:ef:6a:b9:f9:48:2c:1b:ab:41:81:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:31:0F:3D:02:86:9F:87:38:EE:20:7A:7E:EA:C2:43:4D:08:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:54:e6:8e:e0:e6:ae:17:69:36:52:f7:79:ea:7c:04:56:44:
         44:41:af:bd:79:c0:56:8b:bb:cd:da:0f:42:ef:11:6d:03:2e:
         3c:e1:41:37:53:b0:c8:1b:5e:44:63:10:f9:d9:ab:a3:55:a7:
         ab:2f:29:54:44:60:77:ef:a8:66:72:dd:63:bf:62:0c:6d:0f:
         82:8e:d7:41:2c:ae:36:22:f0:e2:24:11:fd:8e:89:16:97:c6:
         b2:a6:a8:eb:c9:02:a9:68:02:60:b2:6a:05:82:8e:78:96:6b:
         40:cf:64:88:d0:d5:87:a7:3c:2c:14:51:5d:a3:7b:18:3f:0c:
         0e:3a:d0:1d:ac:4e:a0:5c:82:d0:92:5e:cf:16:71:79:88:eb:
         fe:dd:69:03:46:de:82:3a:0f:8d:8c:82:11:c7:85:45:1b:e2:
         35:fd:9f:6a:36:87:88:c5:9b:3f:bd:f4:55:6c:54:ba:ce:32:
         5f:37:10:df:d8:f1:90:8e:86:60:2b:63:23:72:6d:96:5c:dc:
         01:fb:1b:34:31:e6:0c:55:b3:31:32:87:08:4c:67:7d:37:81:
         a0:ab:24:36:4b:fd:ea:58:8a:20:8f:d5:1d:47:fd:c6:24:0d:
         9a:3b:16:ac:f1:1d:9b:39:27:c9:d0:eb:b9:6a:7f:8f:c3:9e:
         d7:a4:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:08 2025 by rpki-client