Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0a9d10-110a-3db9-ad81-ef19cbeb190c.roa
File:                     4a0a9d10-110a-3db9-ad81-ef19cbeb190c.roa (raw, json)
Hash identifier:          dEsmcWCXp13aI7fR/qulA/hx32Jm/eyjw3QNBA0JFmY=
Subject key identifier:   99:7F:70:9D:2F:C8:F2:41:31:EF:04:AB:45:92:FB:77:A9:13:D2:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCDA728097AB6C6358480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0a9d10-110a-3db9-ad81-ef19cbeb190c.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     396590
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:cd:a7:28:09:7a:b6:c6:35:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=98afd547-d074-4acc-bc52-cfcccca0b4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:50:2b:43:c7:a4:c5:0e:be:5e:8d:bd:d5:
                    91:8c:8d:7d:c8:72:69:c4:41:25:bf:a7:d9:f4:01:
                    ee:6c:30:a7:6e:9a:90:5a:a9:55:7b:99:22:5e:f9:
                    7b:ad:75:e5:5c:9e:16:53:e4:99:01:ed:be:d3:b6:
                    57:68:1f:66:2e:1c:bd:a3:82:bb:81:6d:ba:e9:f1:
                    3b:ea:ba:6b:b2:28:ba:40:a2:63:b3:13:a1:dc:46:
                    2f:26:bd:0c:8c:5b:ec:77:6b:ea:b6:ee:6c:74:c6:
                    a4:5c:e0:08:0d:b3:93:d4:7a:89:ab:05:32:73:0a:
                    6c:4c:ca:32:5b:55:58:1e:84:08:53:a9:bc:a9:09:
                    7b:4f:65:0f:a7:3c:bc:72:73:c3:77:f1:82:38:58:
                    a0:0b:2f:7f:a1:f8:6c:18:31:88:23:c4:c2:df:a0:
                    c6:05:57:c9:2d:3e:f5:df:e0:42:01:08:cb:27:f6:
                    9d:7e:e0:70:63:6f:0b:d2:d5:0a:29:d7:88:87:ea:
                    06:20:90:d4:f4:00:67:5a:d3:68:a7:2b:7a:09:24:
                    c6:65:fc:97:f8:53:4c:ec:1e:03:ce:df:3a:3c:47:
                    71:fa:e2:2f:9a:b2:9a:30:8a:6d:2a:01:72:75:b7:
                    94:eb:81:a8:15:71:1b:c7:7f:9a:26:8f:91:98:d2:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7F:70:9D:2F:C8:F2:41:31:EF:04:AB:45:92:FB:77:A9:13:D2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0a9d10-110a-3db9-ad81-ef19cbeb190c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:62:82:15:5a:e1:c6:f6:fc:e1:fe:ae:47:69:27:72:df:
         d5:09:3e:20:40:35:2a:c8:71:66:8a:95:73:0c:53:0b:ae:5b:
         39:d1:22:8f:33:07:7c:07:90:e3:25:e9:4a:16:63:f2:90:21:
         39:86:93:fe:a4:0b:16:41:85:61:8c:4b:14:b2:68:b9:40:e1:
         79:31:8a:8f:c1:d1:56:1b:7c:bc:1d:07:a3:0c:65:7f:31:2f:
         f8:7b:45:6c:b6:72:07:34:cb:15:f6:66:65:22:89:05:9e:01:
         1b:b1:c0:40:66:d7:af:af:0e:31:11:f5:81:a1:9f:0f:84:a8:
         42:96:a8:78:e1:b6:51:89:54:d0:fa:5b:a8:a2:72:bf:1d:17:
         13:45:8e:8a:7b:3d:19:77:0b:11:44:56:34:72:31:1a:67:1b:
         b5:73:da:3c:56:39:51:0c:05:be:64:92:46:0e:d1:d9:bd:95:
         af:92:cf:c6:1b:a5:fb:92:76:fa:83:20:3a:2a:5c:aa:4a:37:
         31:91:f4:fe:4a:9f:9c:31:1d:4e:fd:f8:0c:74:20:86:61:f9:
         ba:91:e1:bf:8b:c2:f3:44:ca:f2:04:c6:51:9d:e2:a8:96:c5:
         38:2e:b2:7b:3e:a6:e6:1b:3d:9c:b2:69:43:78:f5:51:5c:a1:
         1c:4c:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:00:49 2025 by rpki-client