Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
File:                     a29c63fa-621f-3158-9a75-f40261331223.roa (raw, json)
Hash identifier:          ChVk86jUyanDcDCzh4yyVnMHhegIXPU9bUWyErvMSHo=
Subject key identifier:   3D:18:41:95:71:8A:AB:07:C1:6E:46:44:9C:DF:E3:BD:6F:8D:D6:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC6D374936B25AF746000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
Signing time:             Tue 26 Aug 2025 12:32:13 +0000
ROA not before:           Tue 26 Aug 2025 12:32:13 +0000
ROA not after:            Mon 24 Nov 2025 13:32:13 +0000
asID:                     36629
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c6:d3:74:93:6b:25:af:74:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:13 2025 GMT
            Not After : Nov 24 13:32:13 2025 GMT
        Subject: CN=701aa089-4822-40d5-bc1a-81221db8bc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:49:5c:28:eb:09:35:49:59:de:dc:23:57:
                    63:f6:44:8e:e0:0a:3b:2d:c4:e3:1b:1c:3c:39:50:
                    db:77:59:41:e2:4c:7e:df:96:bb:b0:dd:d9:db:d7:
                    47:83:d0:32:25:64:3e:d5:2b:77:03:4c:dc:6f:32:
                    e6:e9:dc:89:82:90:ae:91:6d:c7:0a:05:ca:d8:a3:
                    8b:e7:20:61:20:54:65:16:2a:a7:dc:3b:b1:41:43:
                    c6:be:8b:45:7c:1f:83:e6:14:4c:7b:5a:72:10:f3:
                    f2:ad:49:86:ea:1d:0d:48:e2:e7:02:53:8c:66:97:
                    de:e6:72:99:5a:44:f7:3b:f9:36:f2:88:e5:2f:b7:
                    bd:87:59:cb:4a:ac:84:40:32:58:58:9e:4a:7a:a0:
                    ce:8b:32:19:de:e6:1d:9c:26:cf:77:01:65:4c:07:
                    ce:18:ae:a4:d1:71:53:8c:2c:fe:04:95:a2:d8:1d:
                    76:e7:7c:81:cf:d2:eb:26:4f:44:c3:10:82:33:c6:
                    e9:ce:af:db:79:cc:dd:fa:c6:ff:7c:31:f5:23:85:
                    19:31:7a:ab:da:2d:39:e7:66:65:96:fe:58:e5:53:
                    54:29:89:63:da:92:67:65:82:77:ac:c1:bc:49:ff:
                    c1:32:c7:0e:bc:3d:4e:46:94:e7:c1:7d:ba:91:d6:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:41:95:71:8A:AB:07:C1:6E:46:44:9C:DF:E3:BD:6F:8D:D6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:28:9e:73:4f:f0:e2:3e:0d:15:c0:4c:00:2d:49:bd:26:53:
         d8:50:6f:6b:63:d7:4b:9d:75:b3:7c:49:f8:62:de:ee:d2:d6:
         08:15:bd:e7:21:ab:b6:cc:3d:9d:e8:a1:21:39:20:4e:69:9d:
         c8:75:80:e7:83:72:be:cb:ae:d4:4f:f2:1b:31:83:c6:74:4e:
         ee:b6:2a:67:19:82:cd:6a:d0:12:34:cd:7c:62:ca:07:7d:7b:
         4c:ce:81:35:23:ce:9f:4e:82:a2:0f:56:36:60:3d:cd:a0:99:
         c3:08:fd:67:27:34:b8:6c:71:a4:d9:93:4d:83:ba:22:24:98:
         d5:0a:5b:3e:e6:d2:83:f3:3b:31:ec:8d:d4:bf:63:01:78:1a:
         d6:14:b2:a5:41:18:69:ee:5b:47:f8:07:70:05:17:bf:bd:97:
         ca:59:e5:49:0d:96:58:f7:a4:c2:77:59:d7:06:d7:39:12:28:
         9f:f2:53:97:e4:11:44:09:a5:fd:58:79:4f:aa:7d:ee:0e:45:
         9b:ed:5c:03:6e:1a:0f:48:74:c3:e1:27:13:d4:6c:35:a3:bb:
         53:c4:cc:1d:ab:d7:ef:e2:34:05:90:19:7f:81:44:53:fd:31:
         74:9f:43:72:08:3e:c0:3a:39:2a:a0:97:09:6f:95:af:2b:9b:
         3d:cc:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:21 2025 by rpki-client