Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
File:                     1c2f5541-75b2-3321-97f2-a972858e185b.roa (raw, json)
Hash identifier:          MidDo3tVuI1afd934JLRPLqJie8UjVIWDjGYK/XUIn4=
Subject key identifier:   50:5C:9B:4F:61:A1:50:47:E5:96:6D:01:68:70:80:6C:F9:05:39:9D
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584B4BAC5A01518F3F1FD59BDA40
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     393249
IP address blocks:        2607:f8f0:1211::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5a:01:51:8f:3f:1f:d5:9b:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=4c74bfd8-cc0d-48c2-adf2-310c99281f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:c5:b1:e4:44:cf:a2:74:a0:1d:dd:58:87:
                    63:97:bb:de:5c:89:d7:4e:64:75:8e:eb:fa:73:2d:
                    f0:28:13:2d:a3:62:90:b5:33:74:24:2c:91:b8:4b:
                    a5:63:a6:96:e1:31:60:27:a7:8e:af:1b:1e:51:ef:
                    e1:d0:c5:9a:fe:65:72:15:cb:66:c9:24:2b:f2:80:
                    12:62:3e:41:fd:06:68:50:b9:a4:b3:d7:05:43:5e:
                    85:80:f8:0a:83:de:6d:6b:4e:27:ab:cf:c3:ca:e7:
                    24:e8:e7:37:5b:a1:68:10:89:1a:8b:06:9f:19:7c:
                    e0:32:f3:d5:65:f2:83:70:84:9c:51:a0:6e:ec:92:
                    a8:2d:c4:82:d3:a2:48:8a:69:9a:c2:a5:46:34:e8:
                    2e:47:a1:da:d2:5a:27:5b:66:b6:a6:0e:32:ea:9b:
                    32:8f:21:35:65:5e:be:bd:77:50:82:bb:0d:86:e4:
                    2d:e3:81:6e:c4:62:ec:5d:76:1f:3c:6c:44:59:1e:
                    f2:f7:bd:fa:1c:00:36:30:8e:35:30:85:3a:6c:97:
                    70:65:0b:f1:e4:24:53:ef:d2:68:92:f9:a4:96:11:
                    94:7e:bd:57:90:96:35:94:1a:2d:bb:5b:66:86:8b:
                    13:65:16:4b:69:57:ca:c1:36:38:e1:fc:9e:07:35:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:9B:4F:61:A1:50:47:E5:96:6D:01:68:70:80:6C:F9:05:39:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:34:3d:e0:27:81:30:9a:4f:5d:30:96:eb:0d:2f:fd:f0:d7:
         4c:91:7b:1b:26:a5:45:95:a2:f6:bf:94:c0:d3:df:72:72:c1:
         21:cf:4a:f6:51:1c:99:25:77:da:6b:08:1d:d3:e9:65:a7:af:
         51:f3:f4:60:7a:92:60:91:d2:17:7f:d7:c3:37:bd:c0:5e:bd:
         ac:aa:fe:6e:ca:4c:4b:e3:e9:aa:19:65:88:76:d1:c0:ee:a8:
         ae:95:01:9f:d3:8d:dd:9e:17:6a:0d:be:b0:e1:b5:e0:bd:7c:
         77:39:c0:c0:c6:3b:46:bc:4f:d7:29:96:80:d4:ec:14:e3:d5:
         c7:14:dc:e4:24:a0:ce:7d:2b:de:90:22:48:1c:56:3b:0b:19:
         7b:bd:1c:84:56:3f:25:c4:e1:11:62:77:9b:f2:2a:06:45:41:
         c4:f5:42:79:6d:07:99:d1:27:4d:85:0c:70:38:d7:5c:eb:a7:
         76:f9:ae:62:47:ba:43:8e:75:74:1f:45:b8:7a:df:aa:27:27:
         3a:47:d0:93:fb:14:f8:cb:e8:51:b4:98:52:84:29:88:b6:7e:
         cf:0d:ae:2b:7b:12:e2:63:3f:8d:6d:b7:34:9a:07:61:97:7d:
         10:83:56:bf:61:1c:46:c6:37:df:88:1f:72:19:fd:0c:af:d2:
         61:45:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:50:18 2025 by rpki-client