Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456efdce-02fc-3a68-9250-27974b612236.roa
File:                     456efdce-02fc-3a68-9250-27974b612236.roa (raw, json)
Hash identifier:          eBEQJ2AlpJMpjsaWI+0cBUoIUvKAMH1RVUmTHWkwTO0=
Subject key identifier:   92:E4:C9:2D:7A:62:AD:13:56:29:D5:A1:67:BB:AC:01:AC:27:05:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07C3C9CD3833550D82D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456efdce-02fc-3a68-9250-27974b612236.roa
Signing time:             Thu 24 Jul 2025 12:38:50 +0000
ROA not before:           Thu 24 Jul 2025 12:38:50 +0000
ROA not after:            Wed 22 Oct 2025 12:38:50 +0000
asID:                     396611
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7c:3c:9c:d3:83:35:50:d8:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:50 2025 GMT
            Not After : Oct 22 12:38:50 2025 GMT
        Subject: CN=de535e65-5092-4788-a25e-09f87c16c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:44:d3:3e:6d:97:40:df:4e:f1:43:09:88:
                    25:94:79:5e:30:81:83:c5:d2:79:61:47:f7:23:6e:
                    11:10:09:10:a0:c0:31:a4:66:f7:b6:d9:85:20:a2:
                    ec:e4:b2:43:7a:95:bf:51:15:96:ea:8d:1e:78:8d:
                    ae:77:76:d4:36:6f:bc:36:1f:1f:3a:20:11:59:17:
                    e6:f8:48:e0:7c:61:4e:bf:49:d9:70:97:1f:28:9c:
                    7a:3d:91:81:27:e4:e3:75:d6:69:59:d0:84:3d:4d:
                    75:df:a7:0a:be:b4:af:1c:51:06:32:ab:d9:59:c1:
                    2f:0a:56:18:54:f6:97:21:88:75:8e:5b:89:9c:db:
                    f8:e7:82:f4:10:83:43:9b:aa:e5:ed:37:c5:91:6d:
                    d4:8c:b1:40:dc:e7:8b:1a:7b:89:f6:fe:10:d5:f8:
                    e4:e8:4c:fa:9a:b2:1b:e6:a2:ca:bd:51:d5:4f:d4:
                    92:9e:83:f7:ea:f5:b0:1a:32:7b:12:18:b5:93:b8:
                    40:b1:4c:be:6a:95:2a:d9:7a:94:ea:67:0f:7b:fc:
                    77:95:13:8a:6f:65:1b:77:60:c1:90:d6:5f:e2:8f:
                    0d:8d:21:fe:18:f9:fc:5c:e9:84:dd:80:dd:fb:f3:
                    ed:e6:2f:a0:52:30:44:f9:7c:86:e9:db:37:77:9d:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E4:C9:2D:7A:62:AD:13:56:29:D5:A1:67:BB:AC:01:AC:27:05:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456efdce-02fc-3a68-9250-27974b612236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:53:2b:20:40:6a:c0:16:8e:23:f8:44:49:2c:c4:6c:7c:7b:
         df:c6:13:43:b3:82:0c:56:a2:7f:5b:37:f9:76:0e:e5:7a:e4:
         fd:f2:bc:64:43:9b:3b:78:c8:e9:03:70:7d:5f:13:fc:74:fd:
         d7:53:4a:47:d9:d3:31:3b:0d:ab:99:e4:65:f0:1b:dd:1e:e3:
         01:75:cc:94:56:34:04:68:dd:da:3e:9e:ed:71:1b:79:0a:a8:
         6d:50:88:00:cc:c0:0e:91:a7:af:79:d0:4d:26:f8:63:bc:0e:
         ce:da:a3:57:51:e9:a6:2c:18:d7:09:16:8a:67:d9:b3:59:0d:
         cb:73:45:ae:44:50:89:2d:4c:bd:0d:a4:7b:88:a7:cb:bf:98:
         c5:e6:71:c5:26:13:cf:52:4d:11:1d:61:a9:41:5e:53:9d:c0:
         dd:eb:bb:59:6c:fa:cd:1f:8b:c9:95:29:b7:65:ee:81:e6:28:
         49:a1:6c:48:da:65:cf:8a:5c:4b:0c:74:1c:e0:40:d7:e9:84:
         9c:b9:77:47:f2:a9:49:40:7c:bd:c3:3e:43:60:cb:37:cc:53:
         0b:f4:71:5e:14:15:fd:12:e0:81:eb:92:29:8a:88:e6:94:5d:
         c5:77:83:8f:e9:05:cb:e5:b2:ad:06:b5:fd:0f:32:da:66:38:
         3c:33:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:55 2025 by rpki-client