Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa
File:                     535651a6-bbe6-3404-94fd-1aa0f764c81a.roa (raw, json)
Hash identifier:          dqw7HpBMCIW2cvbT50aNUhJD2PnPUkNkg8uCXcIepOE=
Subject key identifier:   36:67:83:8C:AA:71:ED:41:27:B2:6B:3E:8A:39:F3:B3:C4:41:32:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63F9E25D1AF83894BCD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396547
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3f:9e:25:d1:af:83:89:4b:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=b757d185-7167-4858-9b25-82f6f46f802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:71:72:b7:8c:65:83:4a:c3:47:ad:c7:58:
                    64:05:06:1c:b1:5e:2a:af:16:07:d6:74:9e:7e:41:
                    48:3f:4d:a4:c0:f5:49:0f:48:f1:03:ed:3f:c4:6f:
                    aa:77:ff:c6:f1:71:c8:26:9e:1f:dc:ed:58:17:0a:
                    69:86:0d:ce:f3:4f:6e:92:b6:11:fd:07:6b:04:7d:
                    88:6d:50:a7:75:3e:66:80:2e:79:62:69:f7:ff:3f:
                    23:76:68:3e:04:94:c6:33:5b:2e:36:52:70:9f:f5:
                    b5:0d:be:68:ce:b5:2b:e4:9d:97:db:7a:01:78:80:
                    71:fa:15:1a:fe:5b:68:4b:7c:d6:f3:2d:65:03:1e:
                    bf:37:18:9b:db:99:cc:91:ea:00:1c:cc:c8:7b:7d:
                    92:46:e0:5f:40:8e:9f:c2:8b:20:eb:ac:b1:e5:72:
                    1d:9b:aa:80:1b:97:90:96:cb:d1:12:aa:a0:05:74:
                    5e:70:d2:83:14:7c:d3:fa:fe:83:4e:b3:6f:7a:a4:
                    e3:ae:81:e2:ab:49:fa:ba:d7:6e:f4:0e:6c:b4:e1:
                    0e:d9:7f:9a:b7:da:5c:10:69:bd:fc:7b:1c:76:09:
                    69:b9:65:9a:44:74:05:6b:18:ac:6e:5f:93:c0:97:
                    5c:24:10:85:b0:1f:a8:13:b8:7e:73:d2:45:35:64:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:83:8C:AA:71:ED:41:27:B2:6B:3E:8A:39:F3:B3:C4:41:32:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:be:3e:74:a2:f9:8e:37:00:c8:75:56:ae:84:84:39:25:4c:
         3f:73:b6:60:ed:1e:9c:ea:1d:a6:15:72:19:f0:8a:c1:2e:de:
         36:fc:e1:a3:c5:6b:2a:62:bc:c4:20:39:2b:1d:95:ce:74:08:
         7c:49:47:70:d7:89:ff:f7:35:68:5e:d3:33:62:d4:8a:e5:a1:
         ab:00:ad:eb:49:31:2a:68:a5:6d:26:f1:20:fc:5a:a0:71:51:
         0f:40:e6:69:9a:11:ab:43:30:de:25:87:45:4a:f8:80:b3:52:
         8a:76:bc:4d:78:43:3c:48:2e:a9:2d:d1:55:06:e5:d0:44:82:
         bf:63:8d:22:a7:48:e8:ba:31:ce:fe:4c:69:ee:e1:42:16:f6:
         0b:1e:68:e6:c0:db:69:97:1d:96:41:3f:5c:8a:ec:ac:44:fe:
         c5:58:1b:81:95:b2:f9:0c:9f:ee:a4:39:5f:0f:8c:69:54:bb:
         ac:b1:d0:5b:b6:ca:c0:76:4f:e5:d8:1e:97:51:0c:13:0c:ad:
         85:16:d0:6a:bf:b3:43:cd:43:b5:28:dd:5b:8f:88:b0:14:b5:
         a2:d3:58:8c:71:1c:ca:ce:12:9a:a0:66:91:22:b3:ef:f2:23:
         41:03:d8:7c:54:91:22:69:ac:5a:7d:a7:99:57:57:20:d2:7c:
         ec:07:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:13 2025 by rpki-client