Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb77085d-6fa0-33e3-b848-1e842663507d.roa
File:                     eb77085d-6fa0-33e3-b848-1e842663507d.roa (raw, json)
Hash identifier:          hJqUpei/0t0gMpwbLfyG0AU1KqFeJdZ6JCjbkJXk+V4=
Subject key identifier:   05:1E:52:A1:9E:A5:3C:A3:65:03:74:D3:AF:F0:83:11:75:F2:F4:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC35358A24BE1B7C6F780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb77085d-6fa0-33e3-b848-1e842663507d.roa
Signing time:             Tue 26 Aug 2025 12:32:12 +0000
ROA not before:           Tue 26 Aug 2025 12:32:12 +0000
ROA not after:            Mon 24 Nov 2025 13:32:12 +0000
asID:                     36628
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c3:53:58:a2:4b:e1:b7:c6:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:12 2025 GMT
            Not After : Nov 24 13:32:12 2025 GMT
        Subject: CN=349e9d2e-0d6b-4790-96e0-00307abf70f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:36:b2:5a:a4:9c:a5:a2:47:6c:0a:d6:2a:
                    ce:c5:09:04:f9:a8:f8:72:00:c8:70:92:21:7d:c0:
                    51:e7:c7:cc:56:06:9f:53:4f:3f:48:b7:47:2f:4e:
                    f5:08:a7:ed:c0:3a:79:51:74:b0:e2:a2:e4:6d:6d:
                    b7:99:21:8f:b7:d7:60:43:4b:89:5a:2d:54:1c:f4:
                    95:2e:f7:83:5f:d2:81:84:8e:97:81:31:b6:ca:12:
                    fe:1b:c5:04:02:fd:60:fc:72:a9:16:c8:36:57:7a:
                    0e:79:42:08:cc:2a:c6:d9:23:45:f5:fe:60:fd:b6:
                    2e:21:51:cf:38:4c:2c:28:09:84:c7:68:9f:7e:bb:
                    4d:52:f0:91:4b:0d:3e:39:c2:92:2c:2a:65:63:f3:
                    16:f0:02:3a:ee:a8:ad:21:a6:ff:92:d7:49:19:66:
                    97:7c:0e:33:5b:57:56:4a:4d:39:75:5f:68:36:9b:
                    16:02:66:91:dd:f5:c6:24:35:7d:7a:31:8a:9a:d7:
                    f1:5f:66:83:a1:ec:3a:3d:34:0e:0c:53:82:b7:8f:
                    03:8a:74:70:3b:3c:9e:9f:5f:6f:4e:4d:93:f6:1d:
                    b7:64:c0:09:fc:2d:78:a0:27:d9:89:85:e2:ed:2f:
                    c3:44:13:ba:33:95:5f:de:f5:6d:e1:1c:24:ee:ff:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:52:A1:9E:A5:3C:A3:65:03:74:D3:AF:F0:83:11:75:F2:F4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb77085d-6fa0-33e3-b848-1e842663507d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:dd:cf:39:06:d1:ae:9e:54:8b:dc:ee:a4:cf:68:a6:9b:
         f6:a1:fc:a1:ba:4c:cc:a3:46:35:9e:2b:72:bb:d2:82:ca:37:
         dd:0a:e3:ab:ba:97:16:47:aa:d0:d4:1f:b9:9c:f7:a3:59:9a:
         e6:38:4c:7a:e9:08:9a:f5:49:96:6f:2f:9b:59:dd:97:6a:a8:
         8f:9a:ff:37:50:d2:14:3c:5f:a3:c1:72:18:c1:0f:a0:10:10:
         09:45:6f:50:8a:90:38:ee:76:f5:a6:b0:da:18:0f:c8:86:ed:
         8a:bd:1c:98:9f:8c:13:1e:07:a0:49:c4:35:60:db:64:0a:16:
         74:81:f8:8a:11:59:dd:d5:c0:41:e9:05:96:82:67:66:69:bc:
         11:9d:35:97:23:cd:c8:30:ba:69:29:dc:6d:c1:33:6f:fd:15:
         6e:bf:36:5d:05:d4:41:47:03:54:d8:2b:39:8c:83:67:f6:5d:
         9a:45:a5:8a:60:5e:65:f5:d9:95:f3:f9:91:54:ec:d0:14:dc:
         e9:dc:4b:2b:ba:6f:5c:7c:b3:8b:88:02:9f:31:96:5b:c3:a3:
         d5:18:ff:f7:b6:d9:97:1c:ab:a0:0a:ec:74:43:bd:bf:dd:6d:
         ad:63:96:ec:86:33:57:61:0e:03:17:96:10:55:1e:4a:44:31:
         c6:7f:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:21 2025 by rpki-client