Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cae85c00-6bf9-3fd4-bf35-f31e0b6fc56d.roa
File:                     cae85c00-6bf9-3fd4-bf35-f31e0b6fc56d.roa (raw, json)
Hash identifier:          vakOI855Jir3Pf1wz/8COLHwwp7D56D0HG53r8tSS5U=
Subject key identifier:   20:D2:B0:96:86:06:63:6A:DA:6A:27:BD:18:59:84:90:D8:9D:87:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCDD9955CADA003D4B600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cae85c00-6bf9-3fd4-bf35-f31e0b6fc56d.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     36617
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:cd:d9:95:5c:ad:a0:03:d4:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=15691871-7a4e-459c-bdf8-ee4d9825fcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d7:69:75:67:ed:d9:c9:c4:bb:e2:b2:25:00:
                    5a:ce:12:cc:dc:cc:64:31:87:b4:8b:86:a3:1f:2d:
                    24:27:52:c1:e6:d5:57:ac:ee:66:b4:ca:5c:90:02:
                    de:08:4e:a0:b5:69:df:80:11:7a:a7:78:76:6e:73:
                    32:79:de:92:10:dc:84:ea:3a:e0:07:fc:22:81:c3:
                    dc:9d:58:ce:71:48:61:48:72:01:e6:74:88:a8:26:
                    e8:a4:d4:37:c5:9f:a3:6c:20:02:15:8f:6a:7b:e0:
                    64:ef:82:3e:bb:c8:1e:c9:2a:89:f1:67:30:0f:70:
                    55:b1:a0:01:a2:92:4f:fc:aa:fd:df:47:46:4e:27:
                    60:b8:c8:80:96:8d:40:87:1a:47:fb:67:a7:54:7f:
                    ed:cb:2b:89:b6:08:f3:19:fb:10:bd:86:48:f8:97:
                    39:5d:31:59:81:9e:d9:3c:ef:40:d9:fc:6c:6b:0c:
                    b2:24:70:2a:6e:ad:68:6a:d0:76:ec:6e:98:66:ad:
                    83:cc:3d:c2:63:69:cf:f6:f3:25:8e:54:be:88:34:
                    aa:d3:28:bc:fc:b2:c7:7a:0a:04:a3:dc:cb:56:d6:
                    38:c1:48:88:59:cc:3c:4c:f0:2a:1c:35:ad:48:28:
                    0e:51:0f:ed:91:3f:de:f8:7b:3c:af:b7:4b:60:fe:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:B0:96:86:06:63:6A:DA:6A:27:BD:18:59:84:90:D8:9D:87:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cae85c00-6bf9-3fd4-bf35-f31e0b6fc56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:55:28:7d:87:40:69:67:e2:0e:20:70:17:ec:30:aa:2b:83:
         36:e4:f6:11:f7:b9:33:57:d6:34:b6:46:b6:2d:8d:8a:66:fb:
         86:8e:a8:d5:b4:aa:f4:c9:47:9f:f8:16:07:1a:8e:0d:92:12:
         7e:0c:4f:b9:29:75:fc:de:39:f2:2b:f0:fc:21:90:e0:fe:18:
         86:31:88:61:bf:8e:40:0f:85:82:0a:6c:78:1e:28:f4:01:49:
         95:2d:3d:db:06:05:43:f4:62:44:51:d2:ac:c6:c8:86:1c:2a:
         2d:42:1a:1e:c0:65:4a:b5:2e:e1:47:2c:06:d0:00:2e:3e:6e:
         4f:1f:70:96:ab:79:88:1f:a4:7c:29:5d:f6:0c:56:2c:98:ab:
         ac:62:fc:20:97:e9:1f:f8:81:d0:fd:73:00:84:85:5e:59:d1:
         d2:01:a9:3d:e1:a0:29:54:df:08:49:ab:87:8f:08:ed:c4:4c:
         81:e5:94:ec:b9:45:eb:71:27:e0:de:69:1c:ef:e6:58:ae:bc:
         3c:c1:fd:5a:7f:1b:21:5c:40:32:ec:46:cd:9c:2e:58:8b:5b:
         e6:02:61:e9:5a:bf:9b:4a:82:8e:1f:4c:00:72:a5:b0:e6:c0:
         58:b8:a8:5f:5b:20:17:59:62:8f:3e:6d:79:e9:eb:fb:05:15:
         df:ed:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:26 2025 by rpki-client