Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa
File:                     a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa (raw, json)
Hash identifier:          4TjLa6St276K63vR2W/mDgaOoG3eyzA2t4TVvx2f0nc=
Subject key identifier:   33:13:9D:6B:C7:CB:23:27:14:BE:5A:16:04:73:CD:FF:7D:9E:49:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B98723B3B9EAFE24B78B5B900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     396599
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:3b:3b:9e:af:e2:4b:78:b5:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=a80d4130-c063-47cb-b359-741a543889e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:b2:b6:7e:d7:a1:5b:9b:85:d1:c4:56:3f:
                    2a:cb:d5:85:8e:68:54:bd:8f:81:5a:f8:16:08:8b:
                    73:c6:a1:60:cb:75:6b:64:c6:ac:ab:11:85:35:6e:
                    96:b8:95:6b:36:2b:d2:b8:68:af:f1:7a:cf:d5:d1:
                    1c:68:a8:ea:c5:39:2e:19:23:08:af:12:24:4a:c6:
                    1d:50:19:89:dd:a4:2e:9d:3f:01:8e:3f:05:dc:9d:
                    dd:83:77:6a:69:36:1e:2f:a7:02:a5:0c:7a:bd:07:
                    e9:ea:ed:3f:b4:40:a6:a0:e6:18:5c:86:f7:13:11:
                    45:00:6e:e7:e1:11:fa:db:7a:39:56:32:39:71:84:
                    38:c0:91:f8:a4:ff:33:17:d1:a3:06:dc:d1:e5:8f:
                    b6:c2:6f:db:2d:9c:73:de:fb:18:24:13:2a:e1:7a:
                    b9:8a:26:4b:c7:b4:69:74:e5:11:b0:5c:bd:fc:df:
                    0b:0e:49:39:69:20:ef:58:e3:72:84:5d:0e:8a:9f:
                    a3:cf:f6:00:6d:0a:60:b8:95:13:0b:11:b0:ec:be:
                    04:84:f8:24:db:2a:9a:d1:4b:cd:df:48:e6:8f:84:
                    02:d0:5b:b9:de:0c:db:ab:f7:d4:44:49:14:b3:c7:
                    9e:2b:79:86:db:8e:23:f1:2f:48:2b:97:ea:b2:a4:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:9D:6B:C7:CB:23:27:14:BE:5A:16:04:73:CD:FF:7D:9E:49:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:3c:d8:58:10:3a:c5:51:92:29:d3:a0:5c:f5:19:39:62:
         85:76:b2:a1:ea:10:54:59:c8:00:75:f9:91:61:c8:b3:4b:b4:
         6c:0b:5d:3a:65:83:c0:5a:6e:ff:02:45:9d:b0:65:49:07:bc:
         85:de:6f:6e:06:dd:79:aa:7f:5a:23:f7:3a:f0:e0:fe:b4:2c:
         f8:6e:0e:ad:61:29:cd:ed:ea:df:ea:93:be:91:fe:19:b2:99:
         0d:1d:90:cc:ee:b3:44:bd:b3:02:5d:59:3f:5e:5c:66:3f:97:
         2a:83:ab:c5:2a:5d:0b:07:71:46:fe:c2:fb:a0:72:ae:eb:f2:
         56:aa:7b:04:d4:8e:97:a0:55:f9:6a:d5:5f:54:0c:fc:a9:e7:
         80:c4:4b:ef:d5:84:d9:49:4f:6a:0d:fd:75:60:58:cc:de:03:
         36:86:cb:74:66:f2:ae:f0:f5:ee:8a:25:df:5b:b3:ea:9c:bf:
         73:cd:53:e3:87:39:9c:c8:bd:d7:16:b5:34:9f:70:64:8f:72:
         98:52:4c:73:da:c9:ab:76:c3:4a:56:59:12:1c:10:09:73:e1:
         88:7e:34:55:45:35:ce:21:8c:f9:60:da:63:e6:a6:9b:b0:55:
         0c:ee:79:37:e9:55:ca:a9:41:90:bb:5f:26:c4:c1:65:1f:65:
         cb:b2:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:00:42 2025 by rpki-client