Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa
File:                     fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa (raw, json)
Hash identifier:          kAvr7CWDksq1dsSRdpJ/s7hwEtW1aoYi50XYL04tHtg=
Subject key identifier:   B3:43:04:56:A7:C4:7D:C4:37:2D:A3:B2:6D:3B:6D:3D:5F:45:43:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66321354FE9600B41CC70D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     397200
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:13:54:fe:96:00:b4:1c:c7:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=a67e1944-5483-4ee6-a1a0-ef2e4ffd1d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:0e:14:be:1c:7c:d2:ca:19:eb:a1:f6:23:
                    83:9e:4e:35:c3:fa:f0:a9:46:dd:b5:15:d5:ab:f6:
                    02:05:de:34:62:e6:b7:6f:7e:5d:ad:ae:9f:3e:4f:
                    f3:22:84:8e:a3:a7:30:79:1f:8e:90:6e:e2:fe:8b:
                    0d:03:12:df:c6:6f:24:b9:8c:00:b2:d1:34:c5:d1:
                    d1:dc:7f:6c:f2:b5:b1:48:e8:80:c2:b9:8b:e3:ee:
                    b3:b7:99:a8:1d:28:ff:fb:9b:12:c4:2d:34:b5:e6:
                    b9:8b:3e:0e:c5:02:3a:23:7f:e9:aa:ba:dd:56:88:
                    be:9b:60:44:df:22:a2:01:a5:64:74:41:c6:da:4c:
                    f5:47:57:c2:49:1f:c9:02:cc:35:d2:02:20:52:15:
                    5d:35:f4:8b:3b:9e:7e:a1:79:e0:bd:3f:bd:bd:ef:
                    a5:2e:4e:84:a5:d7:7d:46:5f:f1:7d:39:3e:b9:8c:
                    b4:dc:1b:ea:87:c1:21:a8:e6:11:19:59:a5:25:a2:
                    e3:59:47:76:41:ff:2f:69:b2:19:d0:21:1f:a4:b6:
                    0c:b9:2d:56:14:dc:eb:b8:20:c9:be:56:85:99:40:
                    1f:0b:29:79:bb:de:e4:c4:ba:51:b2:ba:29:02:39:
                    f6:ff:4c:e9:6b:a6:88:ec:41:43:9e:ae:2f:d1:f0:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:04:56:A7:C4:7D:C4:37:2D:A3:B2:6D:3B:6D:3D:5F:45:43:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:ec:6f:04:0d:8a:f8:d6:97:08:40:c5:b5:fa:86:fd:dd:
         b4:a0:7f:41:ee:55:aa:71:5b:96:99:50:c3:e5:36:cb:ae:44:
         69:35:37:b9:54:5b:00:9a:2e:c1:8c:df:36:de:d0:9d:e5:cb:
         fa:19:02:95:d6:9d:2b:12:c9:a4:a1:d2:f8:4f:ef:52:c6:9a:
         13:d3:bd:ca:11:67:c3:1d:de:f7:cf:cb:64:76:5b:0c:a3:89:
         0a:b6:62:e0:13:ff:a1:dd:a7:e1:9e:a3:49:7c:7b:a6:36:0f:
         ca:5c:69:d7:2d:af:96:0b:ca:5b:cd:dd:35:35:6a:0f:ce:56:
         12:4b:97:1c:25:77:e4:e8:47:e6:1b:16:15:65:a3:ad:c4:c8:
         e7:45:80:16:ff:83:84:e7:30:a8:f0:40:a9:0f:65:58:ad:26:
         7e:66:f0:1a:61:2b:73:55:ae:1a:d3:df:94:bd:bf:b3:1f:f1:
         32:6b:ce:a7:ed:78:d8:9b:cf:33:0d:b0:c2:81:bd:c2:64:3d:
         ca:62:e1:18:e6:ee:43:3c:79:bd:ce:d6:a8:22:96:68:f7:e1:
         a1:43:58:a4:94:84:fd:89:de:4b:ad:1c:c5:37:d6:f2:ef:8e:
         c1:b6:6a:bd:80:30:e7:ff:d4:47:71:e9:d2:2b:73:85:ec:32:
         e0:ba:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:12 2025 by rpki-client