Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c51e675-4d96-3227-a8ea-a2ddc94b668b.roa
File:                     5c51e675-4d96-3227-a8ea-a2ddc94b668b.roa (raw, json)
Hash identifier:          EE1fHz9Pzd0xM8PM6rLZ3ceuM2mWaMH/ADV2F4v4tGc=
Subject key identifier:   EB:E9:DB:46:D6:68:B5:BA:D0:8C:F8:B5:76:68:5E:70:15:9F:BF:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C642A4456285D724B45800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c51e675-4d96-3227-a8ea-a2ddc94b668b.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396543
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:42:a4:45:62:85:d7:24:b4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=4fe3afa5-8f97-49c2-9a88-463600b73a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:f6:44:d3:16:9d:51:8d:01:a0:da:62:05:
                    4b:00:85:a4:21:8d:a5:f5:8e:71:79:8c:97:22:52:
                    95:66:ab:54:3a:29:a5:ed:91:e1:c5:26:04:1d:db:
                    26:b7:9c:39:1f:ae:20:d8:d2:74:9d:62:14:d8:85:
                    47:e9:e0:3b:15:52:a8:29:be:9a:25:50:38:94:1e:
                    b3:36:35:71:b0:1b:c9:f1:ac:83:4a:e4:81:6e:ae:
                    b9:e9:0a:c3:f2:15:5e:b9:c3:30:fb:97:e9:e9:c4:
                    f6:1d:66:c8:98:08:17:45:89:40:fc:e5:4b:1a:e3:
                    a1:ef:fd:5a:8e:07:e0:51:a1:68:c4:7a:60:48:44:
                    10:9e:0e:2c:74:c4:fe:9e:06:56:dc:57:c5:20:79:
                    36:69:78:40:9b:85:a2:46:6b:11:1b:2a:24:cd:60:
                    5d:cb:b8:de:9f:86:c7:1f:f8:d8:e7:ed:c4:a3:9e:
                    8d:ee:85:05:e1:5a:41:f4:66:02:d9:c4:dc:8a:b5:
                    38:53:04:b1:40:fc:7b:8c:16:6d:7a:e4:17:31:8a:
                    32:89:16:ec:2a:89:45:3f:5f:ae:42:2c:e6:a9:e6:
                    2f:9f:b6:a2:bd:76:1a:f1:36:7e:42:7e:d8:6b:60:
                    7b:59:8f:d6:88:09:81:c3:9b:f3:9b:b6:b7:cc:19:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:DB:46:D6:68:B5:BA:D0:8C:F8:B5:76:68:5E:70:15:9F:BF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c51e675-4d96-3227-a8ea-a2ddc94b668b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:af:3c:32:57:39:ec:81:09:69:76:8c:b4:37:26:ed:ef:48:
         92:f1:c6:a2:6a:48:3d:69:45:30:8e:61:7d:c3:aa:32:d7:0c:
         96:b2:b1:63:3c:3b:6d:89:60:0f:bf:62:82:e0:7e:59:f2:11:
         96:f7:14:2e:20:fc:05:95:c6:9a:2e:65:68:21:b8:43:9a:04:
         15:ba:34:f9:4c:27:46:f6:93:f9:6a:6a:c0:49:ea:c7:8c:74:
         ac:3a:af:91:9c:e1:69:11:6b:bc:93:36:c1:5f:08:d1:45:f6:
         12:fe:96:02:35:31:8c:21:4d:6a:da:61:a8:c6:34:1d:7e:cd:
         be:4b:ab:56:99:c1:bb:80:48:27:95:5c:00:ac:e5:1b:53:99:
         29:ef:b4:77:c3:c7:9f:9b:99:12:57:48:00:b3:3a:11:08:17:
         d6:42:c3:22:e5:aa:88:d9:03:fe:9d:e5:d1:fa:7e:5b:9a:1e:
         1e:76:47:9d:53:97:21:d0:01:d1:00:d5:6a:11:c2:26:55:89:
         a8:2a:b9:96:e7:e8:4a:76:39:47:83:5b:a1:64:37:4d:4e:62:
         33:39:fe:fd:40:cc:61:f0:6d:64:98:df:e2:3f:4b:1c:70:02:
         0b:a6:5d:2e:d5:50:41:c8:2e:57:cf:7f:94:59:cc:bf:72:09:
         08:58:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:19 2025 by rpki-client