Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa
File:                     4b1b3462-d768-3936-8f5a-1e27257305cb.roa (raw, json)
Hash identifier:          RVu4Kv1Ko7XaJvi480p3JZMoFr5QgLwr3BcgM2bWc1o=
Subject key identifier:   01:FA:44:2D:EE:AD:E1:C2:3B:22:A2:FB:8D:71:6D:A6:F9:9C:E0:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B4043C7F7AAB899B2C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396541
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b4:04:3c:7f:7a:ab:89:9b:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=9e935188-1856-4e74-b56b-db2b17433c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cb:47:ca:dc:fe:f3:08:a0:72:7c:84:4f:bc:
                    5c:cc:77:bf:49:6c:5a:78:02:1c:82:09:29:62:7c:
                    34:28:4e:6c:f1:2c:e9:52:c8:41:34:aa:11:f9:96:
                    38:93:81:da:78:af:d7:26:c1:d8:25:24:cd:2f:bb:
                    84:d9:31:75:13:48:f7:1f:0d:12:22:bf:fe:e1:27:
                    1c:21:98:32:7c:8e:1f:20:05:33:33:09:c0:5c:65:
                    02:24:d3:54:50:14:5b:5f:5a:2c:e1:27:e6:6f:d0:
                    63:c6:ff:58:8d:b9:bd:69:22:12:e3:e9:53:c2:05:
                    f3:e4:f4:b2:b9:9e:25:b4:16:f0:df:8d:ae:bf:e5:
                    58:1a:48:87:66:06:27:ab:14:fa:26:e6:f5:a7:e8:
                    00:d1:c4:1c:8f:cd:5b:85:e8:b6:75:15:de:02:ea:
                    c6:f9:93:b7:1d:40:e1:c2:84:90:88:bc:99:76:5a:
                    4a:e9:e6:b4:9c:a4:68:7c:7c:d4:5e:16:ea:58:11:
                    f8:9b:7b:e8:95:71:43:f3:15:52:08:0e:8a:3c:8e:
                    6e:d2:85:47:42:48:5b:f7:cb:4d:b9:35:c2:dc:5a:
                    b7:81:c7:71:4e:ca:58:5a:f0:fb:ac:f7:18:45:15:
                    92:d3:af:85:89:1b:86:73:95:61:12:c4:bf:f4:20:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FA:44:2D:EE:AD:E1:C2:3B:22:A2:FB:8D:71:6D:A6:F9:9C:E0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:16:ea:f7:6a:0d:5f:55:c3:5f:e2:2a:70:e1:1a:04:58:60:
         06:bc:0f:ed:90:7a:58:e1:14:a4:b9:61:36:f7:39:2e:42:8b:
         aa:6c:10:c2:f0:38:d5:c8:15:c1:86:9b:59:3a:4b:97:6a:b2:
         c0:e8:7f:0f:d9:49:fc:34:78:6b:99:09:07:07:7c:3a:4b:07:
         2e:6b:97:c8:d7:75:b4:02:10:b0:87:67:c4:02:17:b4:1a:21:
         03:32:24:d3:44:9f:e0:81:32:c1:96:f5:1d:b6:57:90:33:94:
         99:e9:44:95:3e:87:10:26:0a:7e:53:72:43:f3:05:8a:42:66:
         df:1a:be:5a:51:0b:b8:1e:03:c9:ac:70:4d:5e:c7:f6:60:e1:
         90:fb:ed:30:be:33:1f:28:07:2f:6f:fa:7a:32:ae:d6:65:b6:
         aa:35:e6:1c:f3:eb:d3:03:9a:00:ce:77:61:b0:84:5c:80:e0:
         3b:77:fe:f0:1b:14:53:61:a3:95:ac:23:56:41:85:8c:ee:97:
         9d:b1:39:ac:13:59:41:4d:f1:61:03:7d:12:97:3c:00:ce:a5:
         92:04:ea:c5:dd:55:72:fb:2a:ab:41:f9:cb:4d:56:0e:e0:29:
         0c:98:c3:4e:c3:dc:08:6a:fb:a8:09:dc:c2:da:71:c5:bd:86:
         d2:6c:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:55 2025 by rpki-client