Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7789d6af-2b86-3bee-a919-384de02c8d09.roa
File:                     7789d6af-2b86-3bee-a919-384de02c8d09.roa (raw, json)
Hash identifier:          hJfW+7leyPxX/Uit6fBwxPQCVJeFSIuM2ASj0B+Kgao=
Subject key identifier:   56:D6:A1:60:E6:2B:FB:86:1B:F3:D6:3A:94:E5:D9:06:32:58:1C:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1806FD6976EBAE04AB576548
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7789d6af-2b86-3bee-a919-384de02c8d09.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396589
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:fd:69:76:eb:ae:04:ab:57:65:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=6a431820-552c-4ba7-817a-1a117a2ed1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:75:e2:56:8c:cc:1b:f5:5f:b3:67:f1:0e:
                    ed:f4:e0:53:52:ff:00:df:6a:de:70:52:07:e7:97:
                    87:1d:ed:1b:5c:33:c3:c9:2d:1f:6a:f5:f0:ce:e8:
                    b1:3e:5e:bb:c6:41:a6:c1:45:f2:83:41:3f:a0:b7:
                    67:92:3a:7e:a8:b9:c0:97:e7:0f:57:9e:17:8f:09:
                    23:8a:aa:4f:98:db:36:51:78:89:cd:c4:3c:e9:e7:
                    da:88:34:08:21:97:ff:6a:ea:38:42:8d:c2:2a:4d:
                    4e:d8:d5:e8:fd:99:31:0b:b3:6a:b4:d4:e1:3b:a8:
                    18:ee:5a:2f:d7:15:8a:7c:55:3c:1d:67:9c:4e:20:
                    cb:3d:39:5b:21:4c:c3:3c:63:32:37:2f:6e:88:f9:
                    87:78:f1:9f:90:33:b8:d3:90:3f:84:ad:88:ba:40:
                    77:ea:ec:dc:66:9e:da:74:78:25:b0:06:84:15:3b:
                    93:40:e7:1a:20:21:1b:e0:ea:cd:a8:11:59:fc:67:
                    3b:a7:fc:46:71:22:d4:9a:94:16:f6:0d:32:04:0b:
                    a3:5c:b6:e8:43:06:4e:20:39:52:f3:e2:1a:8b:fb:
                    b3:e6:9d:61:3f:dd:1f:47:fe:cb:a0:87:48:4e:0a:
                    ff:ed:b0:07:44:76:24:7b:c9:53:7d:de:e9:2a:a9:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:A1:60:E6:2B:FB:86:1B:F3:D6:3A:94:E5:D9:06:32:58:1C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7789d6af-2b86-3bee-a919-384de02c8d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:75:58:c4:cf:e5:6e:be:ae:4a:c8:4e:64:09:ab:dc:23:
         e7:04:3e:75:83:08:69:8d:07:24:7a:48:8e:98:29:f6:00:b7:
         5f:3c:c3:46:2f:95:98:08:43:6e:01:7e:8b:58:30:ef:af:4f:
         60:7c:95:c8:7d:57:4c:19:1e:c4:11:07:a0:74:9e:fa:cb:49:
         d4:ac:0a:3b:6d:9d:cd:94:de:7b:4f:57:43:95:77:88:8f:94:
         fa:5e:d3:97:c0:fe:4d:0f:c3:4f:6e:55:b9:20:5c:82:b6:75:
         2d:0d:bd:53:62:4e:50:cb:35:6a:d5:90:64:a9:93:01:67:f3:
         b3:96:c9:09:f3:cd:5c:74:7e:6c:07:e4:2b:86:be:db:b8:43:
         54:e1:34:fd:1e:af:e0:54:4d:c6:af:97:aa:7d:49:bc:f1:ba:
         39:84:1f:28:9b:5c:4c:58:2e:6e:0c:71:9b:11:e7:15:98:76:
         bc:a4:1c:7d:00:33:28:92:2e:4c:65:81:a4:96:58:0d:ed:c7:
         40:90:aa:a2:c4:8c:30:7c:41:1b:2e:a1:6e:5e:03:f5:fd:9e:
         2d:f2:2a:49:e4:5f:d2:9a:f0:1d:4f:30:6a:a9:a1:a4:02:ed:
         35:13:65:f5:28:55:c3:67:8c:3d:1a:1f:5b:b6:8d:80:32:0e:
         ff:30:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:37:48 2025 by rpki-client