Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa
File:                     66984bbb-9419-373e-a0c2-a2d67ba81747.roa (raw, json)
Hash identifier:          dZVIzzrE8cWJqrx8a/2d/JkNzRbPyvW9AJhKMr5bcEw=
Subject key identifier:   F1:69:BC:7D:9B:02:FA:9B:F5:C2:51:59:05:DC:44:AB:CA:1E:E1:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A1198C3124E21C2570BE9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396588
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:98:c3:12:4e:21:c2:57:0b:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=6aef1fe0-4ba2-4a2b-99d6-8f34578b5ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:8e:15:b7:96:c0:d9:cd:f8:a5:a8:d6:56:
                    55:ee:c6:ee:e2:d1:aa:5f:6e:97:10:68:c2:df:a6:
                    43:92:fe:a1:fa:8a:f8:51:72:2c:f3:7d:d9:cf:9d:
                    ef:0e:bb:2a:01:e0:87:c1:04:44:ec:04:51:52:58:
                    83:64:1f:c4:ac:6f:fa:cb:bd:86:01:6c:ec:4e:57:
                    29:59:93:07:ff:02:02:24:09:64:c5:b8:c1:eb:93:
                    bb:e0:01:3e:f7:48:c9:bd:22:33:44:c2:a2:a7:a3:
                    f4:b7:e0:a6:21:91:3e:2b:dd:10:f3:66:44:3b:37:
                    b9:82:78:88:2b:6e:49:fd:13:a7:d4:5b:73:3d:bb:
                    dd:b1:3e:42:fd:b5:4c:a8:39:6c:1e:f8:1a:c6:cb:
                    d1:0b:5d:0c:44:a9:1e:06:be:c8:57:53:f9:ff:26:
                    45:a9:01:36:b3:12:0c:01:cc:f9:bf:21:f5:f4:cb:
                    2b:d7:5e:b3:8c:32:6d:8d:f0:79:38:bf:92:c2:96:
                    16:4d:c7:da:81:50:96:e0:8c:7d:da:26:ef:c7:56:
                    e2:83:bd:3d:96:25:c7:39:b1:87:02:42:54:d6:7e:
                    da:f4:be:01:5f:ff:b0:f8:b1:cb:7d:58:da:97:6d:
                    f9:d3:59:a6:82:67:13:51:32:92:dd:65:9e:93:cd:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:BC:7D:9B:02:FA:9B:F5:C2:51:59:05:DC:44:AB:CA:1E:E1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:f5:a1:a3:dc:5e:d7:f8:1a:8a:35:84:83:5d:d8:fc:3e:
         63:83:f4:49:a6:6c:2d:9f:20:dd:f2:96:d4:6f:4b:5a:e9:b4:
         66:3d:ef:76:ee:a5:ae:f4:ea:8c:94:d4:4a:59:fb:21:ec:ca:
         fd:a1:4f:0e:5e:3a:54:d8:77:95:e9:5a:4b:0b:14:c8:e1:c2:
         89:52:f8:66:ab:ba:cc:8e:ef:53:98:de:f5:31:28:0a:6f:6d:
         41:48:0e:98:86:28:76:18:1e:60:4e:64:d4:fd:d9:40:d7:cb:
         91:fa:20:f7:a9:81:66:86:02:5d:fb:50:8f:df:2d:4d:3d:d9:
         13:a4:95:37:b0:0d:0b:65:d7:c8:72:e9:93:f3:83:09:ef:e0:
         67:e1:73:c6:bf:ea:82:68:39:dd:48:36:32:b6:09:94:e7:d4:
         c2:b1:db:3f:c5:d6:bd:dc:4a:b6:a1:cb:bb:c2:13:f2:69:f3:
         ba:84:45:b0:a5:a3:8e:a7:42:fe:98:4a:a3:e2:57:4e:6d:c2:
         15:03:4a:58:a7:3f:ff:f9:65:93:79:5d:c4:dd:0e:57:c9:cf:
         da:ee:7b:b5:10:02:3e:d4:b4:dd:c4:c9:fd:70:d5:44:33:ad:
         8b:ec:95:f0:66:34:b7:53:57:42:a6:74:b2:f4:ec:8a:11:22:
         d3:6c:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:51:54 2025 by rpki-client