Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b142da-993f-30ba-a494-89b427fee747.roa
File:                     45b142da-993f-30ba-a494-89b427fee747.roa (raw, json)
Hash identifier:          F/dPcR7RQjPgDxpr/ZzAY9Zy5YjoUbgLJu0HUUgMsss=
Subject key identifier:   D6:C8:F7:5C:56:AF:90:56:8C:91:94:C2:B3:6D:9D:F1:19:71:25:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63E38DFBD70ED1FC579A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b142da-993f-30ba-a494-89b427fee747.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396588
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3e:38:df:bd:70:ed:1f:c5:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=a7a46050-e740-4045-931b-8bf629b01d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:85:37:50:37:4d:66:4e:17:fc:73:de:33:
                    73:61:3f:97:93:29:db:5b:c8:88:d9:7f:a6:16:11:
                    65:e7:91:33:ee:8a:2b:d6:fd:af:8f:ef:6c:57:f4:
                    0a:78:02:37:7b:47:a3:5a:d0:36:35:13:76:bb:ce:
                    1d:ed:c5:6f:19:c9:59:ce:e1:19:62:f4:e1:66:d1:
                    35:f4:9e:fd:89:bf:7a:ba:63:11:09:75:3b:c9:ce:
                    07:1f:bd:b3:63:8f:0c:cd:72:f3:f6:87:19:13:36:
                    d6:9d:c1:51:86:ed:7f:d3:d2:78:ec:23:21:34:b6:
                    3e:8f:15:67:03:58:08:a3:93:b9:de:ed:32:75:b7:
                    ae:59:bc:5b:6e:9b:30:97:45:8e:6d:05:8f:bb:e1:
                    f7:95:d4:9e:82:7a:46:ca:f7:0e:15:ac:be:ed:53:
                    9c:ac:7a:7f:3c:98:bd:cb:dc:97:fc:11:ed:6d:72:
                    f9:ef:b7:d8:8c:6e:74:bf:be:08:fe:4a:2f:44:b2:
                    c6:ce:e3:76:08:97:82:0d:94:aa:e2:03:e6:50:25:
                    e0:43:44:0d:45:f9:55:b0:fb:44:c5:d0:3f:de:2b:
                    d3:88:4a:af:b9:16:04:24:f9:41:dd:41:04:e6:e5:
                    c1:a6:6d:08:76:8c:64:c6:fb:1b:30:b8:d9:f1:07:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:F7:5C:56:AF:90:56:8C:91:94:C2:B3:6D:9D:F1:19:71:25:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b142da-993f-30ba-a494-89b427fee747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:ca:62:8a:9c:88:f4:87:01:85:52:e0:0d:e2:a2:19:02:
         5a:83:34:8c:99:74:f3:49:63:47:44:aa:b3:da:b2:d3:9c:9e:
         78:ae:b3:e5:d4:5c:68:46:fc:46:5e:a9:03:da:f2:c5:ed:db:
         b9:f9:c7:e5:4f:12:bb:56:6e:e2:db:00:9e:bc:a9:ae:d5:90:
         18:bc:e5:56:7f:89:79:a6:f3:a1:6b:c2:50:92:93:f6:97:a6:
         fc:a2:00:92:1b:90:5b:1e:ed:3a:96:82:f4:8c:fd:de:eb:d3:
         62:9c:06:a7:68:e0:bb:a9:65:0c:d4:ef:f5:75:6e:10:65:87:
         32:2a:23:07:b4:b4:ef:b6:30:c9:b6:f0:49:87:f3:2c:85:46:
         1e:8a:f1:bd:68:38:18:0d:35:0d:99:ec:be:be:d3:f0:17:28:
         36:e5:ce:a3:59:63:45:e4:ec:bd:00:a6:f7:dc:7f:08:7f:49:
         29:8e:9c:fc:7c:7d:af:00:d9:e3:25:86:23:a6:ce:43:9e:ee:
         31:33:70:dc:e2:ae:d4:d1:e3:71:a3:46:04:10:c1:0a:18:3a:
         0f:7a:70:4b:f6:80:e7:d3:18:a8:42:63:9f:c8:f5:78:d1:a0:
         f9:d3:9f:69:1a:24:84:a3:00:80:e1:b7:18:34:53:59:4f:af:
         6b:54:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:30 2025 by rpki-client