Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa
File:                     2e6396ab-9adb-373f-9029-a0c4812dddcb.roa (raw, json)
Hash identifier:          5UKu9f1POD3OxmkDV6MdclIO3rTT8K8bOEXu9phgyQg=
Subject key identifier:   5C:F8:5A:7D:1C:9B:E9:07:88:73:05:AF:45:42:23:DC:E4:11:7D:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07D87D28426E023655B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa
Signing time:             Thu 24 Jul 2025 12:38:51 +0000
ROA not before:           Thu 24 Jul 2025 12:38:51 +0000
ROA not after:            Wed 22 Oct 2025 12:38:51 +0000
asID:                     396567
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7d:87:d2:84:26:e0:23:65:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:51 2025 GMT
            Not After : Oct 22 12:38:51 2025 GMT
        Subject: CN=63ea7238-e871-4b89-aaa6-2666582d0bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:95:f4:17:7e:9f:92:e2:66:be:55:b5:42:fe:
                    ff:77:04:1d:ff:c2:46:ba:de:9a:6a:25:db:3f:f0:
                    f9:a4:41:e9:50:40:05:f1:63:0e:0e:9f:38:f2:9b:
                    16:08:6d:60:46:06:1b:5f:41:65:bb:de:e6:ed:dd:
                    16:86:d3:d7:bb:a7:36:f2:bd:5a:5b:25:ca:00:9a:
                    67:b2:1f:e1:61:f9:75:f4:cf:ef:22:87:a6:89:9a:
                    fe:86:db:f5:3f:7b:7a:d0:61:bf:0d:6c:ef:b0:16:
                    9b:1a:0a:2c:98:11:cb:6b:f1:a0:e7:79:3d:8f:6b:
                    45:10:93:46:20:f6:df:b7:51:e0:e7:e5:f9:c4:10:
                    d5:93:68:54:00:af:c8:c0:bf:89:46:40:69:78:5b:
                    55:0e:7b:98:c8:2c:1f:ee:16:07:fc:76:d0:af:cb:
                    97:bb:43:19:d8:8e:9c:f2:f5:92:78:08:0f:26:55:
                    84:0f:d7:5d:ea:ae:97:45:22:3b:d5:b9:c0:6d:41:
                    9c:9d:95:4c:26:68:2f:e1:35:53:f6:6a:2d:a6:26:
                    0c:e3:e5:11:d8:34:5f:08:e3:d5:6c:4b:e7:5d:47:
                    b4:1c:9a:73:44:5b:d9:1f:81:80:8a:cb:9f:52:70:
                    52:8a:7f:63:1d:6a:a9:bf:50:4d:5a:5b:e9:ce:38:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:5A:7D:1C:9B:E9:07:88:73:05:AF:45:42:23:DC:E4:11:7D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:8a:1b:8c:5d:2e:38:24:f7:a2:50:8f:f4:4e:fe:31:4c:
         4b:01:d9:9d:95:bf:21:ae:59:dd:10:49:65:65:a7:11:fb:89:
         b9:7b:ef:8c:23:02:a3:ee:d4:2b:2a:05:ea:3c:a4:60:32:ff:
         3c:93:86:a9:a8:89:9d:b1:8e:a5:e5:3c:15:c9:5d:d1:b5:06:
         ba:bd:b3:ac:88:c7:bf:68:c5:0d:6e:fa:ba:8b:0d:3e:1d:90:
         6b:90:cb:7e:1a:96:32:cf:f8:f9:4a:a6:b8:61:bd:fe:74:2f:
         fb:92:5e:e6:10:fe:02:1a:96:ff:41:a7:a3:1b:fc:08:40:40:
         70:67:3d:b8:3f:d9:c9:c5:dc:76:81:a2:00:f3:49:72:a7:76:
         8c:62:4b:60:bc:0f:00:1f:1b:8c:81:89:96:78:33:c5:40:41:
         8f:7a:13:2d:b6:96:c4:a0:30:c0:91:75:a2:41:8e:15:2e:44:
         7c:8f:1c:e7:0d:45:b8:36:d4:5a:76:5b:e2:96:fe:52:22:26:
         77:73:7e:1a:66:29:7e:83:8b:2c:e2:47:f0:3e:8f:d5:4b:d5:
         05:90:ff:f9:b9:4c:dd:da:62:b2:67:d9:eb:cf:0c:0c:2d:7a:
         2c:d5:09:d8:67:d3:9a:8c:57:9a:47:72:9f:12:b3:05:9e:a2:
         41:44:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:10 2025 by rpki-client