Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683beb0d-e4c1-3c05-a792-14997a57902e.roa
File:                     683beb0d-e4c1-3c05-a792-14997a57902e.roa (raw, json)
Hash identifier:          w+/4KcakD8U//Q2U+php8UaASmG3WIalBhWNqTbCU/w=
Subject key identifier:   3C:02:83:59:23:45:D4:95:C4:67:10:20:B7:99:12:E0:BB:AE:8E:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B4ABB3EEA6AA6E032540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683beb0d-e4c1-3c05-a792-14997a57902e.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396571
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b4:ab:b3:ee:a6:aa:6e:03:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=039c0c14-8cba-4184-a721-cadc38f8a0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:db:69:0b:f8:a8:50:0a:90:42:ee:d4:60:
                    c9:44:da:0f:1b:f7:5a:88:01:88:5a:dc:24:6b:1b:
                    7d:b2:9d:df:b7:ad:1c:9a:86:cb:c7:25:9d:a3:43:
                    72:44:d9:6e:2c:a8:4c:03:1f:53:2c:99:9c:e2:1b:
                    8e:1f:b6:46:56:53:d7:3c:80:88:ea:6f:43:a0:90:
                    86:23:bb:cb:ad:f3:21:73:b8:3b:96:7a:3e:a1:b6:
                    a4:a2:da:39:5f:99:7c:23:5c:b2:b7:c8:bd:f4:98:
                    5d:8f:d5:e4:83:ea:d7:1b:a8:ec:25:6a:b7:00:50:
                    25:f6:5d:f9:3a:c1:f8:89:38:30:54:6d:50:ef:fa:
                    b2:20:94:b5:b7:57:60:0a:1f:f3:08:d9:8e:c6:4f:
                    ac:5f:b3:52:0c:26:d0:cd:48:9a:a3:2e:db:8a:c3:
                    1b:08:68:c3:c7:da:69:cf:b6:d0:2b:5f:96:c0:b3:
                    7e:aa:98:60:d0:20:eb:55:2f:16:82:99:2d:12:7a:
                    68:09:93:7f:b9:0e:50:4c:d9:97:fd:81:a1:20:13:
                    46:eb:25:e1:76:06:41:a8:c9:0b:e8:f4:4f:73:a9:
                    02:eb:3d:06:c9:43:97:fa:e7:56:60:03:de:47:3e:
                    e5:4d:a9:e6:6c:80:ce:7d:34:cb:e4:7e:94:5a:94:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:83:59:23:45:D4:95:C4:67:10:20:B7:99:12:E0:BB:AE:8E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683beb0d-e4c1-3c05-a792-14997a57902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:bf:93:40:0a:eb:8c:81:ae:68:8f:b0:93:1a:bd:b6:54:
         11:40:cb:be:88:bd:54:7f:f4:3b:6c:98:5f:3e:26:a2:8f:87:
         1b:cc:3d:3d:8a:60:9f:55:ef:16:f0:ca:aa:15:ad:54:24:33:
         78:8d:68:ff:cd:4a:22:1f:98:51:9b:89:04:62:8d:d9:3b:e1:
         63:11:88:ab:d6:27:88:21:b2:1e:f0:cd:85:25:4e:ee:47:42:
         06:66:45:bf:e1:f4:d5:a4:dd:26:9e:fb:57:78:6b:5e:ad:25:
         f5:bf:d6:60:e4:10:82:5f:d1:9f:16:82:d0:94:ae:17:fb:68:
         a0:d6:38:80:ca:d4:18:32:03:9f:d8:05:d1:42:a1:2a:9d:fd:
         7c:52:56:22:ae:0e:8b:73:4a:6e:44:47:3e:93:5a:1e:7f:87:
         f0:17:3b:78:11:7e:6e:56:cb:5e:59:f3:f7:63:9c:97:87:fb:
         9f:e3:e3:d7:c6:fd:85:c4:c5:a0:52:62:b7:92:4a:89:b1:ab:
         e8:c4:ff:ec:5b:1a:7c:36:b8:19:c3:52:1c:9f:7b:82:84:64:
         6f:a4:b7:ba:dd:57:5c:02:28:dd:de:f8:07:28:df:f1:32:4d:
         db:41:68:f5:c1:8f:b7:c2:c3:a9:76:de:39:e7:b3:bc:c0:33:
         de:f2:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:27:48 2025 by rpki-client