Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/839cb90c-9ce7-3feb-85cf-7571ac4fe137.roa
File:                     839cb90c-9ce7-3feb-85cf-7571ac4fe137.roa (raw, json)
Hash identifier:          oVL93cYi201fwxwkDed5c5QnRnO7V1f2ZzHksoodoqM=
Subject key identifier:   8F:01:50:28:91:F4:AB:BA:C8:EF:5C:BA:B0:03:1A:42:C4:A7:66:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A11966C06BD43A5B7C86F50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/839cb90c-9ce7-3feb-85cf-7571ac4fe137.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     36620
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:96:6c:06:bd:43:a5:b7:c8:6f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=980b5f66-8b87-4de1-8fae-b0e3f4ae827d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:14:ef:e6:45:83:e2:45:ca:27:0e:24:d7:
                    60:41:2b:ab:7c:4a:84:e9:1f:bd:24:07:2a:74:be:
                    14:35:9e:a7:16:3d:56:9f:3e:4a:6c:71:65:6e:51:
                    fb:f0:18:eb:4e:5d:07:eb:1a:4b:cc:68:a6:11:0d:
                    aa:4c:c7:46:97:41:ee:a2:be:44:b6:e0:38:92:e3:
                    21:b3:2c:c7:20:b0:ef:30:e6:9a:c2:d2:cc:97:73:
                    da:98:e9:02:95:26:bf:09:57:67:6f:80:6a:da:9d:
                    d9:57:6f:de:b2:2c:53:71:36:c1:0a:3a:e7:29:84:
                    b0:60:5a:6d:15:25:14:db:de:56:b2:45:98:46:fe:
                    34:d8:ca:2d:17:e1:79:68:b3:ae:eb:16:94:a6:a1:
                    e9:20:a6:bf:f6:ed:88:ac:d3:e0:1d:1d:5c:31:a6:
                    1f:b3:d7:80:50:f7:f0:ea:b1:b5:69:42:a3:4e:d8:
                    41:1d:9f:b1:5f:bd:7a:75:e2:98:40:2b:4e:9e:1a:
                    99:b5:35:ea:a6:2b:f9:a5:b4:74:38:4e:88:5b:85:
                    ca:26:90:e3:b3:d2:48:da:c2:0e:cd:20:0c:f6:f1:
                    7c:8b:83:52:c9:2e:7d:7e:cd:b5:00:64:37:b9:fb:
                    06:3c:84:4e:65:62:9c:8b:e7:93:3a:4b:77:8f:60:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:50:28:91:F4:AB:BA:C8:EF:5C:BA:B0:03:1A:42:C4:A7:66:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/839cb90c-9ce7-3feb-85cf-7571ac4fe137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:71:87:39:4a:6d:ed:f5:41:62:d5:03:64:c3:21:5e:e2:df:
         13:89:a2:e8:9d:57:0b:27:24:c9:49:a3:a2:bb:c9:62:99:0a:
         a5:e2:81:a0:b2:84:22:69:5b:09:bb:39:7b:28:fa:1b:07:5c:
         6e:96:90:32:b3:80:e2:d0:7a:5e:bf:ef:fa:35:e3:92:c1:c8:
         ae:67:0b:4e:69:a2:99:07:86:23:d8:3b:27:17:bc:79:33:e1:
         ac:de:43:0e:f7:ef:0f:e2:13:24:e5:d7:ea:e6:f6:8d:db:91:
         9e:1e:69:64:7e:19:3d:fd:05:bb:19:a8:9f:86:2f:26:4e:49:
         85:a8:86:09:c2:ae:9c:2c:39:99:ff:b1:a0:ad:06:50:92:b2:
         7e:24:82:07:4a:f2:e7:a9:38:ea:fb:d4:fb:32:5c:ed:72:17:
         92:9e:82:b6:04:58:5b:4f:1c:7c:66:c4:95:22:1d:5a:1c:9a:
         f7:ec:f8:2d:9c:a8:16:a0:3d:cc:5b:bc:2c:e4:83:d5:0a:ac:
         7f:ec:f6:76:96:30:9f:80:81:1d:f4:28:7c:23:af:8e:d2:69:
         46:1e:11:0c:07:57:1f:bc:5b:c6:e8:6b:0a:78:80:00:4d:58:
         99:3c:29:7f:29:1a:e0:d7:a5:03:47:ab:b5:7f:f4:36:1c:10:
         47:b7:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:53:12 2025 by rpki-client