Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa
File:                     d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa (raw, json)
Hash identifier:          Ph9WkVsru2wFeGFqvQJuLUQkDkRJALbDKQDTE8NHQzI=
Subject key identifier:   95:00:97:BD:40:7D:BB:4F:62:35:77:0A:0F:A4:3F:7B:ED:62:04:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B7BA7EEB5E786AC12AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     397198
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b7:ba:7e:eb:5e:78:6a:c1:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e2dacb23-2a26-4f3b-8c6e-71369450d03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:6c:44:70:0a:3e:40:ff:6f:f2:f8:39:36:
                    16:50:4c:3b:0b:98:c3:90:1a:30:74:18:43:90:57:
                    59:65:1e:2b:fe:35:f0:ce:e9:a8:97:9b:d9:c4:7a:
                    e2:21:8c:e3:db:02:c4:0b:e6:6b:ce:84:a6:dc:57:
                    b0:04:bf:20:64:4a:db:40:31:ee:44:b5:1a:13:36:
                    f7:b9:96:34:f5:c5:b0:5a:35:45:57:51:cf:77:9c:
                    94:4a:28:84:84:59:e2:8d:8c:1d:cf:ac:0e:14:12:
                    40:dd:38:4a:84:4d:6c:ff:9c:d8:9d:69:55:2d:4f:
                    0b:c1:d4:03:ef:d1:71:3c:08:73:40:e6:0e:14:a5:
                    fd:4d:e9:bc:8d:36:14:20:1f:62:66:9d:13:95:ba:
                    96:2a:d5:8e:72:7f:bd:1c:64:a9:c9:3d:5f:5a:94:
                    22:82:4d:b1:5c:93:ed:49:48:ed:7c:de:32:99:fa:
                    32:00:bd:d0:8f:12:ce:85:92:fa:8d:85:d3:20:fc:
                    a9:6f:8c:bd:cb:5e:79:04:b5:34:d2:82:f5:f6:ff:
                    70:47:9c:9c:3b:e4:2e:ff:d6:10:33:43:49:eb:ea:
                    0f:a0:79:57:36:67:61:d1:59:f2:f9:8e:f4:f0:39:
                    7d:d2:0c:ae:10:29:97:08:77:5c:f1:68:47:a0:a3:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:97:BD:40:7D:BB:4F:62:35:77:0A:0F:A4:3F:7B:ED:62:04:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:73:a0:1c:aa:62:b7:63:97:85:cf:c7:4e:23:a0:fc:d3:
         88:66:b6:8a:f8:5d:51:ce:8d:15:ef:28:4c:de:b2:13:46:97:
         99:58:d1:e7:29:c0:dc:88:58:8d:5e:f5:78:23:4c:b8:2d:00:
         d7:ef:f7:5e:40:45:b3:24:22:32:43:bc:80:be:f6:37:fb:1b:
         57:5e:04:e2:f6:8b:85:c0:a4:08:c3:d7:75:0e:4f:42:9a:ef:
         9d:5b:a9:06:61:dc:5b:8e:9a:a2:9c:b7:80:30:ba:57:04:b1:
         86:dd:96:e0:27:74:9c:62:7a:22:42:dc:2d:b3:83:76:0a:65:
         51:7a:43:64:b6:81:08:02:56:e4:77:b4:0d:c8:27:95:24:52:
         96:99:09:b1:ee:91:73:36:44:10:3d:3f:80:32:58:3b:27:6e:
         f2:b3:21:91:92:b7:4b:30:96:68:cf:9d:a6:0f:96:a6:80:bf:
         09:4b:dd:69:1c:03:be:60:87:58:63:c6:2f:cf:5a:10:4a:8c:
         4a:b2:6c:aa:03:c0:42:0d:39:e1:8f:80:2a:9e:28:7c:c6:fc:
         d9:a6:20:a3:cc:91:74:88:4d:c4:02:6a:df:19:e6:98:2b:0d:
         af:96:03:6d:d6:da:3b:3d:7a:50:9d:2b:8b:ab:43:af:8a:82:
         cc:c0:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:04:33 2025 by rpki-client