Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9494a98a-996d-32f5-a44b-56b836ecf00f.roa
File:                     9494a98a-996d-32f5-a44b-56b836ecf00f.roa (raw, json)
Hash identifier:          1uSy17vx/+JHDrXAnDPHp89900IuOcIPJ+rlUT1+TJs=
Subject key identifier:   9F:19:D4:58:A0:05:BD:2F:13:A1:0D:89:1C:17:24:22:B1:9C:5E:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD627FBD7BD519A53E306940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9494a98a-996d-32f5-a44b-56b836ecf00f.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396566
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:7f:bd:7b:d5:19:a5:3e:30:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=5db10801-9ab6-438a-a37e-35cc5c4c6584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:e2:a3:be:e9:91:c6:55:39:cb:29:11:bd:
                    62:d9:47:d6:0c:c0:8f:a1:f3:45:b8:75:e9:59:63:
                    da:3f:a6:50:0f:18:dd:98:c0:75:61:cd:39:7c:71:
                    94:fc:36:eb:c7:ba:f6:b8:8b:b8:66:cc:1a:85:56:
                    2f:10:ec:d0:14:c9:99:be:0e:f4:fd:85:92:77:25:
                    f5:ca:81:0a:ef:39:ea:31:70:93:36:70:48:ad:2d:
                    b5:8c:27:87:bc:57:ec:b0:6b:a5:dc:f6:7a:78:89:
                    75:2a:b2:66:f0:81:77:d1:59:c1:64:5e:6b:02:c1:
                    ae:4b:07:e3:cc:8b:46:44:f4:4c:9a:3a:ff:51:ad:
                    1e:ed:da:93:00:bf:f5:eb:7e:c6:bc:20:5e:2f:5a:
                    0a:56:94:36:24:e8:c7:8a:01:f3:84:e0:dc:56:8e:
                    9e:48:96:d2:e5:0c:92:cc:6f:e9:ed:ba:c5:91:7c:
                    d4:e5:ba:8b:e0:0b:45:e7:40:f9:f6:bb:ed:ab:c2:
                    2a:fc:b0:59:02:f1:cf:01:f3:37:8d:94:1f:fd:66:
                    1d:83:a7:73:d9:2e:d6:fb:3d:06:3a:33:19:14:5e:
                    08:f6:00:8c:5b:67:64:0b:2c:47:ee:ca:b0:e4:2e:
                    e8:64:29:4a:49:5e:76:dc:03:ad:8c:2c:93:92:e7:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:D4:58:A0:05:BD:2F:13:A1:0D:89:1C:17:24:22:B1:9C:5E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9494a98a-996d-32f5-a44b-56b836ecf00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:45:3b:87:bd:5b:81:0a:42:38:20:fb:3e:4d:49:11:68:
         12:f7:dc:e2:39:b6:49:e3:a3:af:22:fb:65:fa:39:09:c9:9b:
         ae:0c:ef:d8:5d:8e:d6:84:3d:4a:68:e3:f6:e8:ad:f7:8f:17:
         0f:20:37:71:d3:d7:35:17:1c:5b:e8:06:1c:ae:88:12:56:c1:
         8a:73:4e:21:09:99:ef:75:dc:6e:03:4f:99:15:b3:7c:cb:12:
         38:ce:b9:cd:d9:60:1c:5c:1e:8f:f8:da:cc:77:12:da:3b:99:
         8d:73:55:1b:3c:97:65:e8:2a:b0:7b:46:56:b6:d6:16:03:c0:
         e6:84:8c:f8:8c:36:a9:e3:d4:27:40:d1:11:19:4a:c0:42:0d:
         89:7f:dd:4f:4f:f1:58:77:3e:1a:5b:77:5d:2f:3b:94:39:f6:
         95:0b:05:bb:39:d1:97:b9:df:1f:28:89:3b:69:f5:c8:dc:4c:
         fb:c4:7e:a9:e9:12:8b:55:57:e4:bb:ee:80:9a:7d:4c:3b:39:
         b4:8a:65:d0:57:b2:1d:ea:c1:c0:4a:23:d4:bb:4b:20:5a:af:
         ff:bf:07:ef:0a:3d:92:59:46:1b:16:cb:76:dd:e1:ff:d0:82:
         8e:2f:50:1f:db:cf:51:ce:b4:fe:27:63:a8:6b:5b:06:2b:ac:
         7f:de:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:22 2025 by rpki-client