Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd4035dc-8fa4-36b7-8da4-1359a03ea00c.roa
File:                     cd4035dc-8fa4-36b7-8da4-1359a03ea00c.roa (raw, json)
Hash identifier:          10uCM6qVBry5mXqBBuDYxaaYWnSGgPRw+zHs3VpDMzs=
Subject key identifier:   D3:01:5B:BB:65:74:07:8F:F4:9A:A3:0A:D4:DC:88:9F:A9:88:1B:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC17A1298C134C4D26240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd4035dc-8fa4-36b7-8da4-1359a03ea00c.roa
Signing time:             Tue 26 Aug 2025 12:32:11 +0000
ROA not before:           Tue 26 Aug 2025 12:32:11 +0000
ROA not after:            Mon 24 Nov 2025 13:32:11 +0000
asID:                     36623
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c1:7a:12:98:c1:34:c4:d2:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:11 2025 GMT
            Not After : Nov 24 13:32:11 2025 GMT
        Subject: CN=4e078bff-86dd-46e1-9493-25e979df438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:b6:53:3c:4a:4f:4e:8b:2d:25:81:cd:16:
                    ab:cb:9a:5c:1e:fe:c3:7d:f2:9f:14:0d:7b:93:2c:
                    1d:75:78:3d:00:2e:04:2c:3a:bd:e2:64:ee:6c:db:
                    10:2e:3f:a6:9b:b4:f5:c1:ec:5e:e0:77:29:ec:65:
                    0a:a3:5d:7f:4d:22:2f:33:ca:6d:93:3e:94:94:54:
                    0f:43:7c:28:18:cc:f7:aa:dd:28:ee:b5:45:40:90:
                    34:e5:3f:91:f2:81:b5:89:ab:83:99:a0:87:f7:13:
                    3d:aa:4e:b6:4b:4f:4f:6f:b7:5c:d0:4b:b1:01:63:
                    ea:a1:06:8e:cb:15:51:6e:0c:8d:cf:50:b9:36:0d:
                    da:fa:7b:1a:24:9d:b7:8a:ff:c8:64:aa:3a:1d:8f:
                    bf:2b:c1:7d:a3:e1:37:16:ab:3b:cb:10:2b:31:9b:
                    6c:bd:d6:da:42:7d:ca:88:1e:c2:80:75:24:61:16:
                    34:84:58:f3:fb:c3:f3:86:db:95:93:57:6b:44:ad:
                    a0:2f:9b:cf:37:35:f4:10:6d:eb:66:15:39:93:d6:
                    d4:ce:b5:fc:23:14:4d:eb:39:30:94:85:1b:c1:0c:
                    14:f0:bb:d3:cc:5d:91:ab:5c:8a:4c:9b:78:dd:bf:
                    7f:fd:a3:58:8c:e8:f2:45:c0:45:c0:87:cc:1f:d8:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:5B:BB:65:74:07:8F:F4:9A:A3:0A:D4:DC:88:9F:A9:88:1B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd4035dc-8fa4-36b7-8da4-1359a03ea00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8c:1d:38:55:dd:90:de:94:1c:f5:58:b4:f0:4b:d8:36:d1:
         3e:7a:09:b6:a8:d7:ce:34:02:3e:d2:81:f2:11:b6:f4:f8:43:
         fb:68:04:18:10:dc:df:2e:bc:da:57:6c:12:62:e7:9d:20:8a:
         c2:c4:a5:52:50:42:d6:93:b5:16:0e:ba:2f:d5:51:68:00:73:
         6d:82:f9:30:19:09:59:16:e7:44:3e:72:99:5e:c8:d2:1d:f6:
         33:ed:17:af:4c:07:66:b8:fe:e5:77:91:bd:bc:3d:62:c8:bd:
         85:5e:d7:08:58:5f:41:cd:2b:3b:92:55:77:7c:30:50:29:92:
         47:24:95:cc:27:ff:fa:36:66:d3:e1:c4:82:00:96:7e:f2:7b:
         74:07:59:08:13:0a:98:04:33:4e:36:ab:24:b9:42:c9:b5:50:
         60:7c:57:b0:84:57:08:26:15:5e:01:87:d6:7f:59:e9:a3:29:
         40:5e:da:84:ff:c9:41:d6:ca:b2:ed:02:80:67:c2:b1:6a:a0:
         19:34:84:f9:f1:5b:f2:09:9a:a6:fb:71:24:8c:b8:82:e6:05:
         99:d0:f1:60:64:53:73:91:f5:e0:1a:9a:d2:b7:68:4d:81:fd:
         68:83:e1:e2:d1:e6:83:ca:a8:49:d5:9c:5f:d9:2b:9b:fa:50:
         0b:6d:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:22 2025 by rpki-client