Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c871dc6-567b-391b-818c-d793bb1229c7.roa
File:                     0c871dc6-567b-391b-818c-d793bb1229c7.roa (raw, json)
Hash identifier:          /4iY1URyG1UJwz+YdeRNmYfu/qDFTxWvNuw10vuF3yg=
Subject key identifier:   4B:7B:BF:87:F0:8C:4E:56:2E:F7:57:7B:CA:06:25:BA:C2:16:39:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1BA21C7761AF3DC241800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c871dc6-567b-391b-818c-d793bb1229c7.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396575
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:ba:21:c7:76:1a:f3:dc:24:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=6271ba0c-3e85-456d-a5c8-64b46d80e708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:db:53:8a:66:45:96:cd:83:88:20:49:dc:
                    22:62:62:aa:e5:fd:5e:db:cb:13:e9:a4:f9:71:28:
                    06:7c:65:39:ec:c7:bc:56:80:2a:27:2b:b1:ed:f4:
                    b8:f5:39:b4:10:f4:8c:eb:ac:ad:0c:80:60:8b:da:
                    e4:fa:15:54:f4:76:a4:25:07:ad:f1:ce:af:b7:4d:
                    6e:b4:fa:df:ba:e9:99:01:d2:85:a9:80:07:cc:7b:
                    3e:9d:21:8e:7a:bc:32:c6:6d:02:c8:7c:44:12:48:
                    10:06:0a:cb:59:5d:cb:75:e5:e2:dc:28:28:6a:85:
                    84:f1:ea:64:ef:df:ef:ec:68:39:af:8f:28:ad:64:
                    85:06:f1:80:f2:6f:45:dc:89:1c:68:08:9d:bd:80:
                    b2:f2:04:3b:f8:7c:e6:c4:87:8e:9b:ca:9b:68:29:
                    0e:62:bc:77:7a:85:d8:94:7b:c3:04:2c:c7:42:fe:
                    fb:9c:69:f5:1c:55:73:91:b8:7d:e5:42:0f:b4:97:
                    2f:4a:40:c5:f9:74:65:2b:f8:a1:89:f6:db:12:4a:
                    a2:67:17:08:96:7b:19:54:97:b4:db:94:9c:a2:14:
                    33:8e:60:f4:f2:b3:95:81:d5:6f:f9:bb:da:73:ff:
                    bb:fe:68:29:d9:12:33:fc:06:f2:f0:da:66:4e:76:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:BF:87:F0:8C:4E:56:2E:F7:57:7B:CA:06:25:BA:C2:16:39:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c871dc6-567b-391b-818c-d793bb1229c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:23:ad:8b:26:85:07:1f:a4:17:9e:d6:90:9c:85:19:26:
         b5:d0:df:71:9d:24:ce:43:64:85:01:97:75:a2:29:a8:c6:7a:
         71:9a:7d:0f:aa:78:62:5d:1d:9a:74:14:62:ff:89:27:24:b2:
         2a:07:54:3b:db:95:bd:e8:29:9d:17:de:48:c6:74:58:1d:0e:
         a3:12:5c:9d:19:68:c6:d6:51:9c:51:36:e6:f9:06:a6:8d:db:
         fa:c2:bf:87:4a:17:e1:99:a4:56:0c:cf:04:d1:fd:c3:26:02:
         6d:65:6d:c4:dc:73:3b:32:d8:5e:57:5a:3b:4c:1c:d1:d3:15:
         16:78:22:0f:4e:14:f4:21:b0:3f:53:c7:47:ae:8a:2b:5e:3a:
         28:57:f9:b6:2a:c2:dc:e9:ad:2e:2e:c2:e0:4a:3d:d7:43:98:
         0a:e7:3e:20:b0:30:0e:cd:f9:07:99:b5:58:5f:ff:e7:84:18:
         eb:db:dd:0e:b3:fb:76:b7:72:1a:ee:3f:26:6f:94:a8:f5:5e:
         55:ea:3c:7f:67:be:31:4d:4d:f5:fd:d7:00:5b:b5:52:8b:57:
         1b:f2:55:2d:8b:89:85:f4:b9:69:e9:82:82:e4:d9:48:cd:23:
         57:ec:c4:55:e0:52:2a:67:5b:35:fb:7d:32:85:46:d3:d3:c3:
         8a:00:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:07 2025 by rpki-client