Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa
File:                     59d9336a-ad50-33a5-8d76-10db3db5f8af.roa (raw, json)
Hash identifier:          GGUM2VlU9uo+q+IYw0DuT1NZcybSoe+UEL87oVLAEQY=
Subject key identifier:   CA:A1:63:4F:11:C7:DE:DD:8E:1E:71:37:0D:41:8C:06:91:BC:B3:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF0828ECB80E6875DE24580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa
Signing time:             Thu 24 Jul 2025 12:38:53 +0000
ROA not before:           Thu 24 Jul 2025 12:38:53 +0000
ROA not after:            Wed 22 Oct 2025 12:38:53 +0000
asID:                     36631
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:82:8e:cb:80:e6:87:5d:e2:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:53 2025 GMT
            Not After : Oct 22 12:38:53 2025 GMT
        Subject: CN=3c7f283a-d27c-484f-935c-66ce2650f7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:53:6b:f0:97:56:f2:90:b4:73:b4:e9:05:
                    c1:37:63:fa:02:6e:98:82:ac:a9:f5:92:ea:69:49:
                    19:3d:9d:cf:32:3e:4e:5b:74:16:7e:72:dd:01:c6:
                    d6:0e:e6:f7:51:33:29:be:6f:e8:9e:f4:2c:28:50:
                    6b:8b:22:9b:fc:56:12:11:9e:58:8a:ec:85:90:0a:
                    57:8f:f0:ba:a5:7d:f9:b4:f5:4d:10:96:e4:85:82:
                    57:c7:ef:78:02:b1:9b:cd:82:bd:7b:cf:37:94:41:
                    a4:95:4f:12:36:e2:80:e6:34:bd:c5:25:5e:2a:63:
                    d5:5e:2a:32:85:9a:62:04:02:df:6c:9a:ac:11:c6:
                    21:bb:4e:b4:b9:af:4e:99:a8:a5:11:6e:57:9b:d6:
                    38:a7:bb:c5:24:e2:8b:c6:42:7b:8f:1d:21:0e:34:
                    87:e6:96:11:0a:26:52:19:6a:1d:cf:d6:1f:0c:fd:
                    29:cd:72:cc:ae:9a:76:11:9b:14:8f:ae:56:b7:04:
                    1c:3a:f4:af:3b:c0:cd:89:8c:82:6b:58:1e:df:40:
                    ef:58:ce:7b:d8:e8:da:f8:77:73:2c:34:a3:c4:45:
                    0b:fb:02:8d:37:32:f3:00:fe:e8:45:62:0a:dc:9b:
                    07:68:13:07:eb:d0:b2:34:01:83:b3:d4:64:41:88:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:63:4F:11:C7:DE:DD:8E:1E:71:37:0D:41:8C:06:91:BC:B3:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:60:22:16:a0:04:a5:f2:1c:47:1a:f1:c3:8d:7a:0b:8c:
         d2:33:5d:93:d2:35:23:c8:d8:fe:b1:78:68:80:c3:dc:b5:5f:
         74:de:3a:a2:9c:10:04:bf:3b:6d:f7:6a:4a:93:ab:91:46:79:
         e5:b5:fa:90:33:b7:88:97:0d:ee:38:57:d1:5b:0d:a2:a2:be:
         25:a1:ae:05:c4:97:48:7c:cb:9b:9b:71:1e:99:18:ad:27:4c:
         a7:b2:a6:89:a7:64:f5:b9:9f:25:2c:f0:4d:16:f0:8b:0e:be:
         d7:8b:73:0e:44:2a:89:e8:75:c4:09:c9:73:ef:7e:54:95:07:
         82:d0:31:55:c2:99:a7:31:44:9c:46:f5:d5:15:1e:6c:f2:8b:
         58:75:52:55:04:9e:1f:e7:3a:d5:3a:a7:60:7a:c8:81:b7:28:
         1f:ea:19:5a:c6:6d:5f:db:16:03:16:94:c3:18:b1:37:12:2c:
         e0:11:0f:ff:ef:19:22:81:eb:54:ab:3b:86:13:cb:6a:57:8c:
         b0:73:04:76:22:ef:08:50:bd:aa:7c:41:69:09:f9:5e:9b:55:
         a3:ec:0f:33:62:0e:52:96:40:e2:b5:63:2a:c7:ad:e4:a1:14:
         0d:65:c8:cd:52:d9:a7:8a:c2:9f:ab:b1:1b:c6:5c:c1:66:d8:
         2e:50:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:51 2025 by rpki-client