Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6f320b-0614-3dc9-be54-04b8dbfea814.roa
File:                     6f6f320b-0614-3dc9-be54-04b8dbfea814.roa (raw, json)
Hash identifier:          uQZzx1QumwFKAbHGsSyubBP1g02ztwcWAmxAq1nIayY=
Subject key identifier:   01:6D:A6:7E:63:62:BC:20:32:1D:3D:DA:C1:99:0D:1E:22:FD:97:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1806FEA01EA676968CE57580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6f320b-0614-3dc9-be54-04b8dbfea814.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396583
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:fe:a0:1e:a6:76:96:8c:e5:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=c8a269b6-7154-4560-ab9d-fe2436091986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:c2:78:31:28:5a:e7:49:de:f1:0a:29:0c:
                    d8:d4:db:9c:cf:0d:b7:e8:33:5f:e7:cc:20:d7:46:
                    c6:42:7a:a8:38:5d:29:ae:92:ec:40:1e:9a:e0:22:
                    85:78:57:62:4b:2a:1f:ad:ad:e3:95:0a:30:53:60:
                    ab:4f:4c:67:3a:06:ac:30:1f:ba:1e:86:01:b8:fb:
                    aa:23:e2:dd:1e:08:78:ac:0a:46:30:4c:59:1c:e9:
                    8b:91:0c:a6:b1:aa:11:eb:e5:09:15:a0:e5:60:e5:
                    8f:7e:cd:56:60:a8:55:3d:f3:96:df:4a:34:7c:42:
                    5f:2f:3d:b3:34:ac:48:71:64:04:73:c2:b3:b1:d7:
                    ef:3a:96:f5:db:6e:ec:3e:6d:70:52:7f:e3:36:55:
                    03:79:cd:b6:17:49:e3:c9:e3:be:ef:a6:b4:5f:00:
                    db:2c:1a:64:ee:d3:a8:12:a3:80:23:ce:5e:c5:a1:
                    97:24:d6:94:79:08:d0:e2:f8:ec:4f:19:d3:8f:d0:
                    63:ae:e3:d3:95:48:85:c9:14:8f:3e:b0:d1:dc:86:
                    43:a0:84:2f:e4:6b:19:7b:48:2c:5b:45:08:90:09:
                    1a:43:03:9e:09:42:55:ad:ec:29:1a:b1:c2:7b:1c:
                    b0:3c:da:ce:8a:06:70:ad:93:e5:d5:06:be:47:92:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:A6:7E:63:62:BC:20:32:1D:3D:DA:C1:99:0D:1E:22:FD:97:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6f320b-0614-3dc9-be54-04b8dbfea814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:99:96:a7:83:e8:f7:37:5b:a3:bd:81:14:85:99:44:8b:a8:
         76:4d:9a:c3:f8:4d:4c:03:dd:38:b5:d2:b6:2c:20:b0:d5:5d:
         85:65:7e:2a:39:11:ef:9e:e6:e3:4e:19:75:42:03:2d:b0:61:
         32:3f:58:cd:41:fe:ca:cd:ab:c7:92:d4:b6:60:df:fc:e1:80:
         6b:ad:e8:43:83:f4:f8:0f:02:96:71:6b:01:67:d1:18:c9:6e:
         65:44:f8:f8:b9:b8:a2:2b:23:07:e2:70:f8:da:88:8b:de:d1:
         bb:89:64:08:e1:30:85:a0:90:9b:7f:1a:97:78:ad:38:73:10:
         28:61:a1:95:91:d7:c3:a7:ba:1a:27:1f:3e:f1:9c:dd:26:db:
         47:50:19:0f:e8:0f:92:ec:dd:e1:e5:20:bd:e7:60:0b:4a:53:
         f6:e5:b7:fa:9e:dc:ae:a1:0f:c5:c2:4b:4b:30:4e:67:9d:43:
         07:df:89:53:d3:ef:58:13:f4:da:a5:9d:8d:f8:46:3b:6c:d3:
         65:60:31:c2:c6:9b:6a:4e:1f:57:43:03:37:78:18:d6:94:c7:
         d8:af:fa:e8:be:30:45:7d:11:b4:2a:ec:c2:0b:67:1a:77:77:
         c3:e2:f8:46:23:31:5a:10:f8:d9:f7:d5:49:35:5d:ed:96:6d:
         6d:ee:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:49:13 2025 by rpki-client