Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
File:                     9614d5aa-742e-3d66-a510-46747d6bc5d4.roa (raw, json)
Hash identifier:          iWUeVJamHEmEFXwl7CaADMmcYB1ePUDcgYGST48X/mQ=
Subject key identifier:   94:4D:63:30:0F:E1:2D:2F:2F:6A:24:49:07:CD:F7:6F:EF:47:9E:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4B5A009861B2DD655380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396561
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4b:5a:00:98:61:b2:dd:65:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=303a3c43-f0ba-4cb6-8edd-e03c878d3c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:28:25:2f:0c:cc:f3:e4:b5:7b:50:ff:44:
                    b9:60:4d:11:bb:a5:75:99:b5:6b:82:ad:7a:10:4a:
                    c2:71:9a:af:ec:0d:c5:81:79:07:16:05:33:39:5b:
                    33:4e:ee:e6:e3:b1:c3:5d:18:ec:4c:90:62:59:a0:
                    26:0a:04:2d:db:80:4f:a1:73:9c:9f:79:63:3a:d5:
                    31:98:07:d1:87:95:35:62:d1:f9:dd:3f:28:f5:aa:
                    ca:f8:5a:89:8b:0f:90:65:f7:19:d9:7d:b7:99:05:
                    96:93:29:45:47:61:f6:3d:c1:78:b0:54:39:8b:6c:
                    3d:6c:46:3a:1c:fc:77:4d:ae:a5:0c:c2:ed:9f:03:
                    f5:c3:e5:09:bc:e2:24:0a:de:d5:ad:89:35:ec:71:
                    cc:99:98:b0:47:d0:4a:7b:6d:8f:37:a6:7e:97:55:
                    9c:64:10:77:f1:40:9f:9e:2e:e5:0a:6b:e8:2d:65:
                    2e:35:6c:f3:de:61:11:8d:50:06:f4:46:21:b2:81:
                    37:b7:b3:24:dc:65:42:00:55:94:0f:c7:4c:ed:20:
                    2b:e1:ee:33:53:d8:74:cc:d8:82:36:3d:77:f2:2c:
                    90:d8:10:12:37:90:59:06:b2:dc:18:21:f6:64:10:
                    c3:ab:89:4e:77:62:d6:70:bc:29:ea:b2:84:22:aa:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:63:30:0F:E1:2D:2F:2F:6A:24:49:07:CD:F7:6F:EF:47:9E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:a2:fb:0d:9a:58:1e:e6:50:ef:55:a2:03:a1:cd:b1:09:
         ca:af:d5:e1:35:9c:ed:f5:26:d0:d8:f1:86:42:16:0e:33:6a:
         bf:13:83:8c:ba:2e:05:d0:ab:3f:62:da:b2:6b:ff:d3:95:2e:
         d9:ce:b5:0e:f9:b3:66:c0:18:fc:de:10:5b:76:a3:f0:7b:82:
         60:ab:08:3e:79:56:35:77:56:2e:1c:3a:2c:2a:d3:2e:75:c9:
         0f:6e:cf:1c:b1:79:39:a5:c8:d5:13:f8:b5:11:48:94:e6:de:
         f5:a1:33:b0:15:8d:99:5f:a7:5a:ad:36:32:5f:82:6c:cb:ca:
         54:02:31:b4:90:45:f7:a5:f4:2a:37:9e:00:cb:f4:31:d0:41:
         bc:e6:8f:6d:a3:e1:7a:3e:2e:4e:5f:33:82:39:de:a2:83:de:
         9d:17:48:e3:83:51:8c:40:6f:c9:f3:5d:1b:c3:87:09:0e:75:
         dd:49:da:75:43:1d:35:73:d2:a0:50:8f:28:4e:a0:f3:4a:13:
         df:7d:a8:18:ee:71:08:c3:fd:a3:91:31:7e:ee:5a:38:c2:cd:
         20:0f:a8:14:f7:c6:19:eb:5a:08:f6:ee:9a:e5:02:c8:c5:f2:
         71:96:70:0f:c9:41:92:1c:8a:cc:b0:db:c3:3d:f1:f9:49:71:
         18:23:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:15 2025 by rpki-client