Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d914c4d-afd9-32f5-af8c-bd91c8dceaaf.roa
File:                     3d914c4d-afd9-32f5-af8c-bd91c8dceaaf.roa (raw, json)
Hash identifier:          pO13eC6YC70hy16XI0NaeqcNqpPABRAFDcGmfAqxXE8=
Subject key identifier:   FA:E8:A9:3F:EC:EC:B3:34:11:FB:29:0A:16:13:DE:45:BC:4F:99:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB15D1693BD3C77F1FDC6B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d914c4d-afd9-32f5-af8c-bd91c8dceaaf.roa
Signing time:             Thu 12 Jun 2025 12:42:05 +0000
ROA not before:           Thu 12 Jun 2025 12:42:05 +0000
ROA not after:            Wed 10 Sep 2025 12:42:05 +0000
asID:                     36632
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:5d:16:93:bd:3c:77:f1:fd:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:05 2025 GMT
            Not After : Sep 10 12:42:05 2025 GMT
        Subject: CN=abe12282-2227-4b3c-8d21-0d176b009394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:d4:0f:7c:9e:29:5a:ad:ca:3b:90:cc:25:
                    24:87:ef:ca:d2:a8:84:db:7f:76:c2:c2:f2:3e:5b:
                    34:5a:87:a7:49:3a:61:fc:56:c7:25:c6:bf:91:a5:
                    50:ef:0d:25:7f:ef:c3:85:94:d0:a8:60:6a:8e:c5:
                    8d:bc:61:df:b9:00:00:eb:89:0a:1b:9d:90:84:c9:
                    3c:1c:dd:f3:bb:fc:40:a1:97:02:21:26:b5:b0:41:
                    50:86:94:c9:28:23:d1:2f:44:bf:8b:54:37:13:3d:
                    f2:e6:80:ff:af:2d:98:47:09:02:d1:f6:51:bd:c7:
                    98:63:ec:b5:cf:07:1e:64:5a:b2:58:5e:09:5a:78:
                    96:9d:83:7e:97:6a:96:18:74:8c:00:94:cc:11:e4:
                    8a:63:90:cc:5d:74:6c:49:72:4d:e9:08:9f:cf:ce:
                    6f:85:38:da:71:cf:47:d3:e0:f7:03:be:cb:0e:cb:
                    80:54:67:39:d6:09:56:fa:fe:a0:d9:35:1d:43:ac:
                    48:24:60:36:60:ec:64:0e:3c:c9:d7:05:10:45:5d:
                    66:2a:ec:18:92:9c:aa:37:03:61:f7:1c:64:97:1d:
                    38:cd:a8:af:f5:ac:d6:74:cf:96:ee:26:e1:a2:5e:
                    ee:7e:69:7a:ee:ca:5e:db:79:7a:a3:1e:31:09:fc:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:A9:3F:EC:EC:B3:34:11:FB:29:0A:16:13:DE:45:BC:4F:99:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d914c4d-afd9-32f5-af8c-bd91c8dceaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5b:9c:4a:48:cd:ac:39:cf:04:25:57:c0:18:d8:0d:03:48:
         79:f8:87:26:44:a2:f7:aa:5b:bc:b7:6c:22:bc:7f:06:cf:99:
         8e:ae:6a:45:88:1d:6a:b1:eb:08:97:84:6b:d0:a6:aa:78:1a:
         cf:b6:fb:17:a9:60:eb:24:90:5a:7a:7c:43:60:05:fd:3c:ac:
         b5:1a:b4:81:72:5c:69:ff:35:32:8c:10:96:36:0b:d8:fb:9a:
         8b:90:9c:be:9b:62:21:50:e6:f7:15:29:b7:7b:6e:20:9d:12:
         6f:a8:60:da:39:a3:79:df:04:e0:31:61:a5:59:e6:c8:52:18:
         47:14:c8:3f:03:41:27:5b:ba:81:ae:be:54:02:22:07:77:21:
         e2:9f:26:68:9d:ab:42:33:da:bb:45:cc:e6:15:f4:57:eb:97:
         8b:5e:22:14:aa:04:3c:5c:eb:d7:91:bc:f9:7c:94:b9:55:64:
         0c:40:06:27:8a:ec:ff:f7:3b:7b:6c:f1:16:47:f3:8b:d7:5b:
         57:1c:ae:79:d3:bc:e1:2d:f4:fd:87:5c:32:80:bc:3b:84:ad:
         23:ae:8a:b3:bf:3b:bc:b2:3e:a9:0b:8e:aa:20:96:34:01:63:
         d1:1c:33:72:c8:c7:ce:79:a2:f9:eb:a9:2a:8d:64:5a:b0:63:
         2f:cc:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:57 2025 by rpki-client