Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c451f09-92bd-3277-94aa-7b91fb7dc5bd.roa
File:                     9c451f09-92bd-3277-94aa-7b91fb7dc5bd.roa (raw, json)
Hash identifier:          UtNdOmDQ4P8Y3FUzh8KtIS5BdH6dmbopjl94qUBiR58=
Subject key identifier:   96:FC:17:C5:D2:8A:E6:B7:CE:17:08:32:5F:53:19:09:04:A8:E0:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B62E437AE303534BA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c451f09-92bd-3277-94aa-7b91fb7dc5bd.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     397206
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b6:2e:43:7a:e3:03:53:4b:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=c2f7fbd9-e08a-4666-8ff6-b8836b47b937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:9e:c8:bf:f9:38:09:aa:8f:86:61:4d:0f:
                    52:86:c9:4c:18:df:96:55:b4:85:0f:9c:1d:b4:18:
                    f4:94:81:83:7b:5b:94:d3:11:d5:30:f4:23:ad:70:
                    58:8e:28:b8:5e:73:e0:48:49:03:17:fa:7a:b1:73:
                    4b:eb:57:48:30:16:20:20:d3:dc:08:f3:cd:eb:40:
                    20:0e:36:9e:00:76:01:75:6b:1c:2f:14:68:bf:e2:
                    29:ee:17:4a:08:44:9b:ce:60:df:31:bf:cd:fb:a5:
                    e1:6e:08:d2:7e:eb:eb:50:9a:97:79:f2:d6:49:cd:
                    28:b7:fa:1d:9d:49:cc:f1:9b:43:79:b7:f8:fa:11:
                    e1:6a:81:f6:af:53:e3:f0:06:59:58:85:45:cd:4c:
                    47:d4:a3:28:ab:dc:78:3b:1f:ef:09:c0:d1:5b:b9:
                    4a:f5:1a:23:4e:45:bc:1e:a0:33:63:b0:b9:9a:a3:
                    e8:b1:17:5a:bf:48:ba:ee:18:2c:35:85:d0:a2:7d:
                    2d:66:f2:2f:59:23:fa:c3:d9:5c:3e:4a:81:29:eb:
                    b6:52:b0:67:fa:90:14:b1:87:0e:60:a9:5b:54:d5:
                    3b:66:f6:de:bc:01:8f:c7:21:86:04:42:be:09:bd:
                    09:ea:08:a5:32:af:ef:23:09:4a:a1:08:1c:4e:38:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FC:17:C5:D2:8A:E6:B7:CE:17:08:32:5F:53:19:09:04:A8:E0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c451f09-92bd-3277-94aa-7b91fb7dc5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:02:90:b6:b1:87:a3:be:e6:bb:fb:f7:98:35:aa:91:e2:e6:
         7e:41:60:d8:88:af:a4:07:32:95:73:0c:fc:e1:43:4c:c8:2a:
         60:b6:63:76:eb:f9:f2:07:ec:41:da:0b:09:68:7f:fa:13:0d:
         f6:24:86:98:7c:dd:f4:8a:5e:11:ba:d4:0b:ae:09:51:58:50:
         fd:14:9c:7c:cd:22:f0:ec:ca:e6:51:27:cc:e6:3c:a3:f2:fc:
         57:75:3b:61:61:d0:a9:05:17:9e:05:ea:e8:e2:27:71:a9:66:
         6b:f3:6a:da:73:2f:2a:08:1f:a7:51:c5:56:cf:8a:e2:07:b2:
         ae:39:27:1d:93:e3:c8:69:77:68:57:f7:5b:40:78:58:f3:91:
         60:b4:b0:d3:c3:ed:3f:85:97:c8:46:9a:4b:b3:cd:2a:0f:85:
         bf:f9:c7:42:91:5a:15:37:1c:19:3b:53:f6:6f:3c:27:62:d9:
         41:15:07:c5:63:f2:d6:26:4c:f0:c7:67:ac:54:ca:52:1b:46:
         74:fb:fe:23:f7:da:78:f9:f7:5b:64:6c:99:71:fc:a0:1b:08:
         5b:18:0b:f7:54:b0:78:6e:06:d4:3a:3e:bf:0f:34:f9:b1:bc:
         59:c5:32:35:d7:33:69:46:c5:eb:b4:dc:86:0d:e7:1d:b4:27:
         31:98:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:04 2025 by rpki-client