Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa
File:                     1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa (raw, json)
Hash identifier:          L8LKoTfSNPzhNhMfvPA8jPt7zhNN9dGbrkolRH1Kvjk=
Subject key identifier:   C5:44:12:20:A2:0A:5C:E9:F1:18:37:CC:F9:9A:7A:8A:DF:A8:43:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D758B42401871AB9B522F080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa
Signing time:             Tue 13 May 2025 16:11:21 +0000
ROA not before:           Tue 13 May 2025 16:11:21 +0000
ROA not after:            Mon 11 Aug 2025 16:11:21 +0000
asID:                     397210
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:b4:24:01:87:1a:b9:b5:22:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:21 2025 GMT
            Not After : Aug 11 16:11:21 2025 GMT
        Subject: CN=5efa5c8c-28a6-4572-b3a5-41580771373a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:85:5a:72:a2:dd:8a:2e:16:43:60:d9:e2:
                    fd:09:da:7b:ca:27:9d:39:9f:02:9f:b4:27:4a:48:
                    11:ff:9b:f7:66:b4:c7:a1:36:d7:53:67:67:51:2e:
                    d7:ef:a3:47:24:81:1f:3d:8d:93:19:9c:e3:3e:40:
                    e7:d4:9f:92:05:12:bc:ae:25:09:54:b6:8b:40:78:
                    10:73:2d:94:6d:1a:c7:74:d8:06:04:66:cb:07:d1:
                    8a:29:13:98:08:0f:1a:03:fd:c5:43:44:80:f8:18:
                    59:da:48:98:20:90:df:3d:db:65:74:6c:33:1b:b7:
                    9b:c9:15:f7:fb:41:e7:f0:72:a7:99:7e:9c:5a:44:
                    a5:d0:23:30:7c:7e:0c:07:15:5c:88:3c:f7:5a:02:
                    76:73:b3:a0:7a:dd:34:87:26:34:99:3e:22:dc:78:
                    3d:6f:65:f4:58:16:2d:4c:a5:0c:e5:04:e6:4f:23:
                    3b:31:df:d3:45:61:97:6a:9b:1b:55:6c:35:ac:3b:
                    68:c1:de:d8:5c:72:25:6f:bc:6c:61:64:e7:d7:5d:
                    44:d3:94:77:05:68:85:f5:96:97:cc:fa:26:be:58:
                    f8:ae:c7:83:c5:43:c3:0d:93:5b:5d:f1:6c:b9:c3:
                    b1:c5:d0:36:5a:49:e6:52:7e:2c:16:0f:37:1d:5b:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:12:20:A2:0A:5C:E9:F1:18:37:CC:F9:9A:7A:8A:DF:A8:43:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:21:9e:d2:0d:0f:0e:6b:99:6d:6a:a4:e6:bf:d2:2f:d5:
         4d:d1:60:b2:c0:b6:b1:5f:f4:5a:1c:30:7c:dd:e3:8b:34:f2:
         e8:f5:da:dd:34:48:7d:0d:91:6a:a9:30:55:a2:15:f7:eb:ad:
         39:0e:af:72:47:29:72:0e:ae:55:77:54:b8:47:67:34:7b:82:
         de:84:fe:dc:c5:11:75:f8:03:4b:b0:73:f8:73:7b:45:28:2c:
         cf:1e:af:4e:08:4a:7b:4e:7a:c8:6b:de:51:2f:05:82:85:37:
         9b:1c:6a:c5:2f:47:bd:a4:c3:b7:30:2b:c0:6a:d0:5d:7b:80:
         21:c6:ba:4f:7e:df:a2:d2:99:5b:93:10:96:e0:2e:a8:d8:26:
         38:e8:38:73:46:9f:cb:2f:2b:73:98:b0:a6:59:c5:a2:1b:43:
         24:78:2d:25:eb:f2:68:66:4a:55:55:6d:cd:d8:bb:33:bc:82:
         50:4f:5d:6b:c7:6e:d7:b0:ef:75:18:67:eb:7b:37:5f:2b:30:
         7e:bd:48:58:7a:f7:0f:e4:ba:58:de:58:57:da:c4:66:0a:7d:
         11:3f:85:02:fa:cb:a8:af:56:6b:35:60:05:a4:48:98:3d:57:
         1a:c5:3b:23:c8:d4:e7:ba:cc:30:fe:5d:51:07:a8:2e:ae:bb:
         fb:ae:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:48:33 2025 by rpki-client