Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de53f98-a899-3846-b4ad-afd8465e2f81.roa
File:                     3de53f98-a899-3846-b4ad-afd8465e2f81.roa (raw, json)
Hash identifier:          WmXDyLRjYVn6vvZZezsekzZOqMHAhS7o8G5o8wN+BXw=
Subject key identifier:   EF:79:86:F3:93:D4:BC:32:7D:7C:3A:02:40:D5:EF:45:9C:19:16:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC798357CE325EE6FBB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de53f98-a899-3846-b4ad-afd8465e2f81.roa
Signing time:             Tue 26 Aug 2025 12:32:14 +0000
ROA not before:           Tue 26 Aug 2025 12:32:14 +0000
ROA not after:            Mon 24 Nov 2025 13:32:14 +0000
asID:                     396614
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c7:98:35:7c:e3:25:ee:6f:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:14 2025 GMT
            Not After : Nov 24 13:32:14 2025 GMT
        Subject: CN=e7a4f156-e70d-43ae-bf07-95d93e1ba493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:70:fe:51:45:d9:01:a6:75:d4:af:95:e7:
                    94:10:e9:35:17:b8:0d:c7:78:b8:a7:78:0b:94:bf:
                    0b:4c:12:dc:e5:89:92:43:6f:c3:25:f9:24:78:09:
                    50:fc:1d:8c:0e:9c:b4:cb:06:08:47:e0:26:45:1a:
                    21:11:ee:86:e1:3c:4f:6e:bc:01:d3:aa:04:73:ef:
                    c9:4a:c4:7c:3c:4f:60:44:aa:52:24:45:7a:e8:32:
                    db:34:24:26:a8:c2:9c:d4:fd:3a:40:63:b3:ec:81:
                    07:c6:ad:ea:41:d4:55:a9:71:6b:05:6c:a0:a0:9a:
                    51:fd:d4:af:d8:33:c5:e0:14:b2:3d:44:c0:48:33:
                    a6:9b:10:f9:12:d7:ab:34:f8:67:96:ed:9c:6a:93:
                    8d:80:23:e2:49:8e:0d:0f:42:41:c6:23:8f:f9:84:
                    99:5d:a8:0e:9d:e0:24:7c:f3:db:db:66:e4:03:3c:
                    5f:29:ef:ab:d2:fa:ce:e3:be:a9:0a:2f:c5:7f:23:
                    73:80:5b:32:b8:22:f6:14:33:19:af:f1:7c:24:ec:
                    43:94:16:44:7f:43:83:bb:62:ed:80:ab:21:16:35:
                    de:67:b6:e8:82:10:c3:31:d7:08:f1:0c:30:08:81:
                    82:28:22:6e:8e:80:39:05:50:81:53:6f:84:13:13:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:86:F3:93:D4:BC:32:7D:7C:3A:02:40:D5:EF:45:9C:19:16:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de53f98-a899-3846-b4ad-afd8465e2f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:f4:68:e4:25:6f:21:cd:58:c9:97:e0:9d:51:10:0f:f0:
         2a:b8:1a:cd:ee:a7:43:75:50:57:24:0f:b2:f4:b2:9e:54:ea:
         73:5b:38:d5:24:6c:87:8c:64:59:23:4d:da:32:5b:bb:d6:7a:
         a5:ab:b8:c6:f2:02:77:78:49:8b:91:b7:71:03:c4:9b:f1:e6:
         d7:9e:14:a8:bc:e0:f0:62:a1:d4:59:9f:dd:c9:49:71:77:ec:
         9c:2b:7f:8a:60:dd:d5:49:9b:78:73:0d:5f:25:61:9a:0b:1c:
         b1:47:dc:4c:62:d3:15:e3:17:29:ac:fd:47:e9:7d:18:23:86:
         b2:62:7f:d1:f1:19:7b:0c:bf:04:ab:8e:2b:87:ec:d7:98:be:
         23:1c:db:76:49:b8:1f:2b:0e:94:70:c4:ec:93:a0:5e:59:c8:
         7b:c5:ce:88:67:3b:0f:ad:aa:f8:8c:02:58:e0:c0:76:30:85:
         7b:6a:33:c2:00:21:c6:0c:eb:2b:af:41:29:8a:3f:61:78:9a:
         ed:c5:f4:9f:17:87:4e:28:43:92:34:af:29:3c:09:fa:01:b3:
         9e:92:e6:37:b3:91:8b:2a:f6:ca:43:df:16:11:b9:ec:80:9e:
         61:10:f2:d8:0d:3f:54:b7:6a:79:93:cd:13:99:31:41:46:c9:
         14:c3:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:08 2025 by rpki-client