Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/696e15cc-db34-379e-a300-50e542e6843e.roa
File:                     696e15cc-db34-379e-a300-50e542e6843e.roa (raw, json)
Hash identifier:          IqFfSULONXXQqCtfeqOsTNxDHMCbyCUeO37xL1KX0+A=
Subject key identifier:   E1:1F:1B:DE:16:F4:02:E2:7F:E9:2E:46:E7:02:8F:CB:5C:C9:71:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCEF5A10178ACD0D4ABD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/696e15cc-db34-379e-a300-50e542e6843e.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     397193
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:ce:f5:a1:01:78:ac:d0:d4:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=6dbefe22-27ab-4a7b-b4ba-a6aa6118de54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:f3:e7:64:2a:3f:86:e2:05:25:22:16:ed:
                    e9:47:ad:73:ad:df:5a:db:81:54:9e:6c:05:53:19:
                    1d:49:34:dd:a4:4a:a3:61:72:2a:9d:10:ec:c5:3c:
                    65:a5:bc:6c:65:b4:9f:c8:ac:c9:bc:95:6b:12:a8:
                    b1:8c:36:ff:30:b0:2a:70:88:2d:76:83:a1:eb:01:
                    86:a4:c1:bf:fa:6a:72:16:d3:a7:f6:1e:83:cd:ed:
                    82:a7:44:f7:93:a2:b8:76:19:36:ba:be:a0:49:40:
                    03:9b:0c:52:cf:c3:89:44:96:b9:b9:03:7d:40:ad:
                    85:40:12:f8:31:87:9a:3e:67:40:d3:9c:b1:3f:ae:
                    86:20:f7:fc:7f:09:d3:d5:7e:b0:62:bd:88:81:24:
                    9d:ae:9a:fc:ee:8e:e1:4f:18:2f:33:19:23:8f:f5:
                    29:3b:b8:e3:66:a6:d3:d0:58:30:0e:7d:30:1d:61:
                    83:80:b1:7b:6f:7d:bf:a6:3e:53:5e:4f:f1:5f:7c:
                    74:1c:55:d2:7a:8e:e3:4a:70:61:33:7c:c9:bc:86:
                    99:25:93:09:2c:53:1a:61:98:f0:62:09:b0:5d:c5:
                    f4:89:1d:33:51:c3:08:86:e5:eb:66:fa:90:f0:33:
                    3b:0d:47:d3:5a:e0:90:db:40:1d:86:81:d0:b1:b0:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:1B:DE:16:F4:02:E2:7F:E9:2E:46:E7:02:8F:CB:5C:C9:71:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/696e15cc-db34-379e-a300-50e542e6843e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:99:b4:2c:d8:6b:73:1c:1e:4d:f7:36:3e:c0:70:3a:92:
         d8:a7:eb:16:52:c2:27:22:76:23:40:55:93:49:73:6b:01:8c:
         3d:95:f1:c7:e9:7a:4e:3e:eb:ca:01:02:8c:7a:56:bc:b4:88:
         62:d2:f5:13:9a:1e:23:cc:6b:67:6c:e0:5f:2d:91:09:90:89:
         c3:e7:09:a1:b0:0b:a6:da:e8:97:eb:09:47:88:3e:8c:37:4f:
         cf:db:fd:37:bd:7c:a8:64:d0:df:37:f3:2e:1b:06:7f:18:0e:
         6e:2e:53:cc:e3:8d:0a:ae:2c:cf:72:39:0d:8a:f9:c2:37:9c:
         c9:22:39:bf:ae:66:0b:28:c4:04:6e:b9:fd:df:77:88:30:bd:
         71:55:ca:90:87:4c:eb:3a:e8:0f:3e:88:4b:aa:e8:93:8c:4c:
         33:da:1b:63:fa:0a:99:35:19:99:fd:e8:60:be:25:33:26:4c:
         d0:b3:04:cd:4f:4d:15:4f:a6:c0:a7:23:39:d2:86:27:b2:4f:
         05:15:75:fe:e7:bf:28:6a:5d:f7:19:cb:ac:f2:1c:0d:89:ae:
         dd:7b:49:76:d9:65:3b:67:71:5a:a6:10:dc:57:74:a1:cc:2b:
         30:51:a6:2c:24:69:c3:17:63:ab:d4:c7:97:c6:eb:1b:3b:83:
         40:5b:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:38 2025 by rpki-client