Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b463a4-8f15-338a-a529-26660c595457.roa
File:                     37b463a4-8f15-338a-a529-26660c595457.roa (raw, json)
Hash identifier:          B0iJlAMxEPgpTUb8Dp6nipvxw6M+3i558QqqGwPlOx4=
Subject key identifier:   68:2F:01:CB:53:01:B4:80:7E:AD:24:FB:01:E0:FF:3A:E9:44:EB:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B9CA2292C9E3E8F2A707D24A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b463a4-8f15-338a-a529-26660c595457.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     396574
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:29:2c:9e:3e:8f:2a:70:7d:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=f08323b1-3ce6-4020-8c92-835e396c1b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:b4:20:ab:c3:8e:87:c5:69:05:7b:44:f9:
                    0c:80:03:25:b3:91:7c:83:e3:81:8a:28:81:cb:5c:
                    71:a6:2e:c5:5c:08:72:30:5c:50:f1:86:af:7e:5c:
                    3f:f7:ae:23:04:35:30:4a:3f:95:50:97:40:5d:82:
                    a7:9c:d3:44:bc:21:44:d5:83:79:16:3f:0e:b2:3c:
                    8f:ae:d5:b1:3e:40:e8:87:a3:e1:d5:a3:2c:7d:b1:
                    61:3a:bc:f8:c4:53:93:b4:99:87:9a:8f:5e:a0:a0:
                    e1:17:55:55:ed:0a:e0:0e:b1:11:ea:a4:35:89:52:
                    75:6d:77:75:40:58:b4:a5:99:56:f1:bf:ff:95:d0:
                    61:50:81:81:62:83:c2:7d:66:f2:75:5f:56:60:ca:
                    bc:c2:1b:97:e5:6d:59:13:e9:da:03:98:39:ba:a5:
                    e2:1b:55:d1:4e:85:08:e7:6d:a5:a0:a0:48:50:05:
                    5d:52:28:6d:33:1b:7a:25:b8:84:ac:f3:84:ba:18:
                    8a:eb:ce:19:5b:76:10:60:79:d3:ec:99:2d:51:27:
                    3e:36:54:8e:b3:80:fe:1a:fe:60:e4:21:7d:9c:e8:
                    ed:2d:8e:1a:63:37:db:29:11:8b:ed:f0:dd:18:3f:
                    cf:81:59:e4:71:ed:53:fb:78:44:45:b6:3a:9f:2a:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:01:CB:53:01:B4:80:7E:AD:24:FB:01:E0:FF:3A:E9:44:EB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b463a4-8f15-338a-a529-26660c595457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:fb:95:58:ba:47:e4:01:72:64:cf:ad:07:f5:80:e6:65:
         0f:6d:29:34:ec:90:c3:47:b1:d6:23:48:1a:9d:95:b2:6a:56:
         db:d3:42:40:e9:d7:46:82:3b:4b:88:2a:56:34:7b:8c:dc:9f:
         5d:99:82:60:80:94:d5:28:42:94:9e:97:32:ce:20:ec:c7:09:
         0b:60:d1:ef:06:48:07:ba:49:8d:24:71:19:d3:e7:37:33:85:
         27:46:33:de:74:24:c1:c7:91:d9:51:a0:96:f5:a0:af:59:9e:
         57:fb:cd:ce:3a:68:db:24:2f:c6:40:f5:83:14:76:1a:d5:c4:
         e5:f2:9e:f4:06:63:9a:01:8b:e4:75:83:73:21:56:e7:b1:bd:
         49:f5:f9:34:c5:40:f5:50:cd:98:4f:17:f1:25:06:13:ab:d5:
         42:c8:d1:86:bb:8b:1c:39:75:2c:d5:9f:42:85:1d:28:f2:67:
         b3:cd:81:87:07:b1:4f:4a:81:ff:c0:9b:4f:81:67:eb:ca:ea:
         19:93:dc:81:3e:bb:64:b3:32:ac:be:44:b5:4c:29:ab:a6:18:
         e4:31:0a:b5:a3:da:27:5d:91:f1:a3:e1:8d:4b:63:ce:fc:00:
         4e:e5:ba:83:61:29:7c:99:d4:8d:31:89:0c:11:4e:a7:f7:a4:
         20:44:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:21:55 2025 by rpki-client