Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c349836-e7ac-33a4-8224-c1ea1f75661b.roa
File:                     5c349836-e7ac-33a4-8224-c1ea1f75661b.roa (raw, json)
Hash identifier:          AwQCow1RufBcpow6qE0JVxy426IeihzlUPjQ9pty6OA=
Subject key identifier:   87:7C:03:4D:FB:DC:53:D0:48:E7:DB:FC:E4:77:75:B5:87:26:FA:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD196EDE3D85C31AE0744A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c349836-e7ac-33a4-8224-c1ea1f75661b.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     397196
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:96:ed:e3:d8:5c:31:ae:07:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=827ae93f-4c96-450b-85bd-e91b5adb6527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:6d:1c:f6:7b:1b:5a:ec:3d:56:60:63:5e:
                    c3:f5:49:bf:f4:fb:8b:7e:a1:7f:13:9a:fa:c9:72:
                    20:13:96:40:78:5f:c8:31:da:ea:1d:60:ff:07:d4:
                    a8:28:7c:76:2a:c2:e9:e4:66:85:af:96:b5:94:67:
                    2c:bd:89:78:4d:75:87:ad:91:cb:38:b1:f5:b0:6c:
                    fe:22:1d:c7:a8:5e:4c:63:71:66:5b:46:73:01:80:
                    75:a5:87:fc:bb:71:08:d0:dc:01:3a:48:d9:9b:77:
                    b1:c1:83:5f:eb:6d:af:e4:5d:87:d8:f6:b8:5d:d7:
                    77:9e:bb:6d:dc:f4:d7:df:f8:51:2f:d7:c1:a9:9b:
                    d8:ad:b0:da:97:8e:66:80:0c:a9:2b:cd:00:cf:ca:
                    4f:08:d5:82:a3:bf:3c:f3:83:30:4e:61:1e:5a:e1:
                    08:fc:d5:d7:bc:a3:fd:2b:39:9e:20:94:27:aa:04:
                    9c:70:eb:6f:95:5d:10:93:4f:87:e7:2b:8a:33:09:
                    bb:d4:d7:b8:b4:65:90:8f:9d:6b:ae:4c:18:2e:c2:
                    cc:9a:bc:b9:1f:29:46:0b:c9:9d:b2:a7:b2:e7:19:
                    f8:6b:fb:85:c2:5a:8a:cf:94:aa:44:55:93:d0:78:
                    b0:d9:b4:fc:7e:8a:3d:df:7c:fb:46:7d:17:88:95:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:03:4D:FB:DC:53:D0:48:E7:DB:FC:E4:77:75:B5:87:26:FA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c349836-e7ac-33a4-8224-c1ea1f75661b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:73:33:a4:ce:18:bc:fc:3f:20:64:f9:a5:89:93:e5:77:
         70:f2:51:54:bf:37:91:15:a9:ef:5c:9b:0c:07:48:ce:a8:a5:
         c8:a6:7d:89:c8:36:e9:fc:39:de:03:9a:c0:8f:59:77:2c:e1:
         be:b9:b3:75:4f:45:69:79:81:c6:48:2e:b5:e2:00:66:cb:c3:
         f1:2c:16:16:eb:cb:6e:86:0d:6f:c8:a8:90:ae:0c:e4:c4:56:
         4a:06:cf:c0:fa:8d:32:bb:6a:c0:51:6a:72:4e:ec:08:94:2d:
         8e:a7:03:93:56:25:62:05:ec:4b:87:db:08:f7:ef:4e:6a:c4:
         91:43:65:18:a3:15:7c:c0:db:6a:93:eb:3d:ad:e5:16:fc:bf:
         12:4f:cf:83:88:30:46:4e:ae:d1:c4:cb:f9:c5:5b:69:03:66:
         9b:1d:0b:d2:47:64:e3:98:9c:96:57:34:6b:6d:e0:a3:49:99:
         dc:9d:ce:1b:fb:d4:49:ed:73:57:d7:d1:7d:87:46:f1:68:3f:
         27:a8:c8:20:1d:af:d5:c6:2c:e5:1a:5a:5a:ac:7c:2b:a0:a3:
         86:ae:14:d6:0e:b7:fc:05:cb:1f:6d:90:0c:90:71:9d:64:df:
         d4:d9:18:28:86:7d:a0:55:d4:d8:4d:98:de:4a:ae:6f:8c:7e:
         e2:03:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:45:10 2025 by rpki-client