Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fc17f84-76df-3dd6-bb46-dee439e7160f.roa
File:                     6fc17f84-76df-3dd6-bb46-dee439e7160f.roa (raw, json)
Hash identifier:          53wr1cFXVvY+a8XmxYcym099Ux24BlXnjrm0WeHI+XU=
Subject key identifier:   10:F8:97:DF:B3:CE:DF:DF:22:08:B6:CB:63:92:F8:27:FF:DF:C3:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B987235262AC3AE9FC5F93080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fc17f84-76df-3dd6-bb46-dee439e7160f.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     396579
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:35:26:2a:c3:ae:9f:c5:f9:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=f0fe8302-af71-41c8-acc7-194fd3ec3b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:fc:a6:c3:04:f2:5f:86:0c:61:30:c5:5d:
                    f2:88:27:12:63:f6:a2:79:ed:fd:d6:e1:c3:7d:c2:
                    da:b2:c6:40:eb:86:00:35:4d:16:63:af:c9:27:b1:
                    4e:29:6f:7f:90:7f:aa:86:a8:86:4b:66:30:46:d3:
                    5f:73:06:d4:84:95:f3:33:65:d3:b4:98:a3:54:70:
                    de:8b:7b:9e:e5:4b:ff:16:04:1a:75:20:a3:09:92:
                    87:dd:31:40:2b:59:1a:39:5c:2f:59:f6:f8:a2:09:
                    ed:b7:82:69:fb:31:40:50:66:26:cd:61:85:ee:f2:
                    29:93:69:05:c3:80:85:29:68:50:12:21:ae:12:1b:
                    88:d6:f6:49:30:cc:87:60:04:21:5c:d4:d3:25:77:
                    51:4f:78:1c:18:94:f4:60:ba:8d:35:f3:17:74:87:
                    a2:3c:f3:63:7d:ff:24:a9:4d:bb:c1:5c:8a:c4:78:
                    01:3f:11:03:af:f3:3e:56:04:c7:32:90:7f:b5:ee:
                    ae:ab:f7:0d:7e:4a:8d:19:31:bb:ce:dc:a4:4a:0c:
                    5a:4b:6a:88:54:70:1b:4a:2d:c7:9a:57:37:09:3b:
                    cc:e3:10:55:61:f4:bb:0c:d1:da:3a:54:be:fb:fa:
                    ac:41:0e:e9:14:7e:b4:72:bd:d0:93:95:00:c1:e9:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F8:97:DF:B3:CE:DF:DF:22:08:B6:CB:63:92:F8:27:FF:DF:C3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fc17f84-76df-3dd6-bb46-dee439e7160f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:fc:1f:9f:15:64:0e:81:e5:d0:00:c7:28:54:37:24:d1:
         de:2b:f4:10:f1:d6:42:1d:cd:e4:43:48:8f:59:a0:65:7b:12:
         e9:be:80:f1:b7:f2:d8:0e:44:89:e8:3e:77:fe:de:06:9b:5c:
         7e:8e:f4:50:b5:a0:7b:34:93:4a:dc:ce:a2:9a:61:0b:f5:20:
         fc:ab:24:ad:2f:07:2d:2d:f8:b9:8c:8e:87:81:3d:d3:bf:99:
         e9:32:44:11:b8:dd:40:ce:bc:d0:70:51:2a:a1:99:80:39:97:
         0c:35:7b:f7:a0:a4:ed:e8:95:bc:5d:c1:ee:28:8a:ce:f0:bc:
         65:1d:ee:c9:bb:88:7f:ea:b6:18:d0:f5:3e:de:1f:1c:f5:51:
         d7:4c:70:27:01:ed:f4:4d:64:b1:99:21:f6:69:f4:c9:c7:21:
         c5:bb:d9:31:b3:12:87:c8:1b:00:89:02:f1:80:de:2e:7f:c6:
         05:41:01:d5:ab:02:30:af:17:bd:c1:bd:db:53:cf:88:3f:79:
         9e:a5:b5:5e:0b:de:5a:74:09:8f:7c:f1:38:e8:12:06:af:65:
         7e:68:0d:45:07:7f:6e:0a:3f:50:62:77:2c:96:ed:d0:24:68:
         93:25:6d:df:2b:c7:04:40:6d:cd:40:0f:83:47:b7:5e:af:21:
         a6:53:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:41 2025 by rpki-client