Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e709d6e9-b7ae-36ca-bd84-0ab81edd632b.roa
File:                     e709d6e9-b7ae-36ca-bd84-0ab81edd632b.roa (raw, json)
Hash identifier:          3PEZn/T3kRjTbJOYZgWOzbDppQAk0hjkDjyq7Sr5Ru4=
Subject key identifier:   CB:8F:46:0C:29:87:9A:9A:89:6C:64:C7:B9:12:38:FF:29:B8:1A:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B5AF5CD9005C17ACE470
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e709d6e9-b7ae-36ca-bd84-0ab81edd632b.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396827
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b5:af:5c:d9:00:5c:17:ac:e4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=4515fbf7-7151-4a64-b5c4-666032cb4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:88:88:f5:31:85:d8:42:5e:f1:2a:cb:c3:
                    ec:39:e0:38:bf:62:bf:2a:e1:02:3d:df:d4:29:60:
                    1c:0b:92:a2:56:be:4e:e5:65:63:94:78:5e:ec:62:
                    b9:86:7d:1c:23:66:f9:96:bb:e0:d6:9d:11:a3:2b:
                    df:a9:c4:9e:c5:49:35:44:ea:c9:c3:98:f9:2a:e5:
                    17:59:e8:9b:10:51:7d:bf:7f:13:90:2a:2e:58:69:
                    9d:ca:0f:fe:30:11:2e:07:75:49:ca:90:58:f7:ce:
                    37:3b:95:93:93:5e:f2:c7:f0:a5:1b:e1:fb:15:01:
                    56:58:de:50:e7:d7:a2:1b:28:9c:d5:8b:c9:1c:92:
                    71:4f:d4:89:00:35:78:dd:70:74:10:d3:3c:4f:97:
                    11:62:48:0a:66:a6:4e:6b:aa:51:43:18:66:c4:77:
                    8b:75:23:78:4e:7d:5c:56:e6:65:7f:cf:92:4a:85:
                    76:a6:ca:30:b1:5f:8a:69:63:50:c5:62:fc:88:70:
                    de:8d:58:b0:19:a8:21:3e:bb:a1:2e:bd:5c:c2:4b:
                    1b:b1:7d:a5:9a:c4:20:34:b1:9f:21:49:60:cc:b6:
                    10:ff:4f:23:e6:24:92:d6:f9:25:47:66:5f:f6:c1:
                    67:2b:18:5d:7e:63:d6:cc:cd:25:b1:14:86:1e:0e:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8F:46:0C:29:87:9A:9A:89:6C:64:C7:B9:12:38:FF:29:B8:1A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e709d6e9-b7ae-36ca-bd84-0ab81edd632b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:24:89:53:11:96:77:23:f3:17:eb:68:a8:f4:28:b7:f5:65:
         53:d5:63:e7:e6:75:63:bb:72:39:69:bf:ac:09:55:b8:d3:a0:
         ba:a0:3d:ad:0a:9c:fc:17:d2:03:30:c2:40:04:66:a0:90:0d:
         82:60:95:13:8b:6f:d8:0c:e6:1b:53:79:47:c7:c0:54:e1:91:
         1a:49:75:f0:31:f7:13:bf:68:48:46:a8:99:91:61:40:7d:04:
         78:5d:ba:7b:e9:5d:8f:13:6e:d0:67:0b:fd:9b:b4:26:7e:7e:
         d1:fd:c8:6a:7d:36:25:4e:3a:ae:ab:b9:cd:30:01:93:ff:98:
         96:c7:3a:55:37:03:ca:05:e1:9b:e1:71:d9:39:0b:fe:8d:f5:
         86:6c:28:46:99:ad:9d:37:83:f3:9f:3d:92:07:65:09:94:27:
         70:46:d3:89:b4:e0:27:c0:d6:18:7a:9b:43:1c:34:ee:99:8e:
         86:46:5f:71:61:f2:3b:1f:25:b7:76:4c:a2:15:85:59:90:af:
         2f:d1:37:5c:83:30:44:59:f7:8e:5f:72:ef:a6:a4:5a:be:97:
         22:ca:19:8f:29:ed:84:ad:da:bc:0e:fc:3c:e2:4c:3e:25:e4:
         73:c5:83:b9:48:33:c4:11:e4:03:7d:86:b1:ad:b6:b9:1b:96:
         83:d8:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:13 2025 by rpki-client