Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4843e6d8-3818-3858-97d7-388604c08e75.roa
File:                     4843e6d8-3818-3858-97d7-388604c08e75.roa (raw, json)
Hash identifier:          FzGcwvwtP5xoazEEGqMW1DGhNxTubk8XIQ0og9oA2h0=
Subject key identifier:   A7:C9:66:6F:9A:78:1A:68:B7:54:EB:6D:FB:C2:A1:9F:FA:FF:C7:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCD9547F62F1999880E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4843e6d8-3818-3858-97d7-388604c08e75.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     396595
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:cd:95:47:f6:2f:19:99:88:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=fa6bdfba-3abe-4f3f-909b-e8eff578e40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:20:be:ba:1e:1c:2a:49:97:52:a5:af:a7:
                    66:93:a5:bb:bb:3e:76:9c:db:a4:31:47:3d:d0:f5:
                    31:9a:6f:f1:56:32:d2:04:da:5b:d3:59:54:94:d0:
                    9f:04:e6:e1:78:71:55:22:fa:5f:b3:24:82:f9:d5:
                    7b:bf:8b:68:55:e6:a3:76:ea:05:25:4b:1d:e5:e6:
                    f0:d8:79:10:7f:3a:d9:5c:1f:c8:5c:00:8c:bc:72:
                    6a:c2:38:07:13:92:e8:88:b2:df:97:01:f0:20:44:
                    5f:7c:ee:f4:d6:e0:a6:c2:95:aa:68:03:ca:e0:a0:
                    3b:e8:35:32:35:c7:13:cb:ff:e9:f8:fd:93:2b:90:
                    5d:ed:52:49:22:11:b6:1b:ff:5e:3c:08:dc:e0:6c:
                    c7:a3:3c:5e:dc:73:ed:fe:88:e0:5b:67:81:9c:8a:
                    1f:cf:da:d2:05:5d:96:d9:0f:93:6e:e6:ab:ee:34:
                    2d:be:d3:20:d8:41:a4:a8:b3:15:da:71:7d:7a:92:
                    71:2c:9b:12:1c:6f:82:8e:25:78:1a:e5:7f:f7:95:
                    89:2f:1a:fe:5f:8b:4a:1b:7b:46:5e:e8:07:fc:3a:
                    00:62:78:27:5e:ae:bd:9f:8c:b4:fd:b5:d1:46:b7:
                    27:66:ea:af:61:7a:37:cc:df:fa:ee:e8:4d:c8:8a:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:66:6F:9A:78:1A:68:B7:54:EB:6D:FB:C2:A1:9F:FA:FF:C7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4843e6d8-3818-3858-97d7-388604c08e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:91:09:6e:2e:bf:3a:75:df:67:84:3d:e1:82:d3:47:88:
         91:b0:74:9d:84:8b:fa:55:7c:af:4d:c6:93:75:ad:2e:88:22:
         31:d3:f2:45:3d:8d:9b:74:39:79:1e:20:c9:9d:93:d3:c7:d4:
         08:9a:5b:b6:e8:d4:d3:93:a6:1c:ed:3a:15:00:aa:c3:bd:6e:
         41:05:b4:33:9b:a6:0c:18:03:8e:fa:29:12:96:61:5d:e3:71:
         7d:5f:78:31:63:bb:16:66:a8:0b:d0:f6:2c:ff:3c:da:d3:3e:
         3a:7e:d3:c1:10:37:7b:af:42:00:cb:c7:10:01:98:97:e9:16:
         8e:ab:59:50:22:b7:17:a0:fc:9c:7f:af:25:d7:4d:de:f5:94:
         1d:1e:25:4f:a0:99:f2:6b:ac:d6:b9:79:09:f7:2a:a4:8f:6a:
         f0:26:1a:b0:fb:50:df:04:25:e3:24:05:4b:36:07:80:b0:48:
         20:68:31:33:0e:ca:b6:c9:b8:26:20:19:a4:a6:70:98:43:3f:
         19:03:fb:fe:3e:8d:ba:ca:00:9a:c2:5d:4b:33:b2:82:e1:bb:
         0a:14:9e:c9:7f:c1:64:43:48:0c:fe:92:c1:cd:cd:0b:9b:3e:
         ea:d6:f9:28:50:50:02:e2:11:fc:46:a0:8d:81:e5:28:5e:c7:
         6d:a4:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:59 2025 by rpki-client