Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa
File:                     aac28f52-c6fb-37bd-bedb-98bb7072157c.roa (raw, json)
Hash identifier:          odBG2QTmLzw26apMFzvOQ82IzyhtaWFIWZnqYBYt+Lk=
Subject key identifier:   E0:96:B8:30:7B:FD:E6:F6:09:7A:0A:49:45:21:77:08:99:18:A2:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6271F351320CD24B4F47C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396596
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:71:f3:51:32:0c:d2:4b:4f:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=a34be269-cd7b-4765-afe5-883f1d6516aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:a9:51:e2:9c:9a:2b:c3:a1:81:a5:1b:da:
                    e6:53:09:71:39:e5:6a:2c:93:49:8d:eb:75:e4:bd:
                    f3:65:02:6c:2f:44:7d:33:bb:51:89:57:01:21:ac:
                    8b:7e:5f:11:8a:f4:ac:96:ab:cf:5d:18:f8:df:80:
                    9a:a2:b8:f4:3a:56:d9:9c:36:df:3d:82:b5:3d:ed:
                    5e:17:04:78:fa:1a:95:2d:24:e5:5c:f4:2f:ce:fa:
                    59:52:31:5f:44:90:51:a9:51:09:74:e3:fc:ee:fa:
                    2d:62:e5:4b:03:1a:6d:bf:29:e1:73:71:15:78:50:
                    73:1f:25:65:07:92:08:31:2f:72:1b:f5:6b:72:4c:
                    13:97:86:1d:37:25:7e:cd:b8:09:81:d5:97:b9:86:
                    96:f0:a9:54:ab:bf:f1:63:13:7e:e5:da:b4:db:fc:
                    0c:80:cc:aa:96:55:e3:c5:82:36:61:fb:2e:34:8c:
                    4a:81:cf:6e:9b:b1:49:cd:44:6e:6a:dd:d0:77:e5:
                    a1:4b:1d:b0:46:a3:22:3b:69:d9:f5:88:29:cb:25:
                    e5:f2:63:24:8a:79:7f:f9:6b:44:84:b5:12:8a:d2:
                    91:77:38:41:7d:7a:65:9f:d1:dd:5d:cc:dd:b6:d9:
                    16:df:a5:be:ba:80:ec:e5:84:29:b2:3c:9f:9b:1e:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:96:B8:30:7B:FD:E6:F6:09:7A:0A:49:45:21:77:08:99:18:A2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:47:15:67:e8:9f:eb:7b:67:8b:b8:a2:ba:d9:7c:83:d4:69:
         f1:4c:68:23:27:29:f9:b6:9e:fc:cb:83:bd:6c:8e:da:40:0b:
         ef:69:b0:43:2a:0e:5f:52:a6:a1:f5:9a:ba:bf:f4:ee:8f:5d:
         4e:91:ca:99:7b:94:96:a3:08:fc:3c:55:3f:1b:f3:e4:3d:44:
         25:80:81:5d:dd:38:5c:44:8c:ce:87:71:2f:01:b6:74:df:a9:
         56:59:d0:aa:97:d2:7d:0f:d6:91:2a:35:ef:a9:b3:73:c3:24:
         87:a0:4f:42:e1:49:3d:52:9a:7f:3c:e1:b0:12:48:e1:c4:95:
         29:dc:b3:61:d2:2f:ee:b3:6b:a4:0a:57:ae:ce:7a:4d:d8:cb:
         72:67:fe:0e:21:85:0a:60:3b:65:f9:8b:e0:29:dd:46:5f:91:
         3f:96:b3:d5:cc:ab:21:c0:91:7a:e3:ee:6b:54:3a:e3:66:db:
         30:dd:50:1b:dc:b8:3c:62:ca:3d:55:9d:8c:ab:88:4d:a9:bf:
         84:dd:d0:80:d8:a0:8c:31:d1:42:d0:2a:91:64:1d:46:e6:3e:
         ac:02:22:9e:40:65:68:fb:ae:a5:14:d3:91:17:31:7a:76:c7:
         fd:6b:66:22:9d:46:60:28:34:ec:4e:3d:f9:bf:30:ce:ad:c2:
         3d:e0:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:11:43 2025 by rpki-client