Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa
File:                     5eb47c15-ba32-3087-881f-efd4195dd9ed.roa (raw, json)
Hash identifier:          Ns1HtgLP7q7gdJHhFXNZz690ymxfiGJAlVx6aOJrtVE=
Subject key identifier:   3D:16:16:A3:58:64:7E:66:0F:55:8A:E6:85:3A:23:D8:98:2B:6D:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D7589899FB6A593F1EC2AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa
Signing time:             Tue 13 May 2025 16:11:08 +0000
ROA not before:           Tue 13 May 2025 16:11:08 +0000
ROA not after:            Mon 11 Aug 2025 16:11:08 +0000
asID:                     396545
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:98:99:fb:6a:59:3f:1e:c2:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:08 2025 GMT
            Not After : Aug 11 16:11:08 2025 GMT
        Subject: CN=924a92da-d9c7-4d01-9bbc-d1fd9830e57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:9d:06:50:a6:e5:5e:98:0e:ff:8a:91:7e:
                    38:59:c4:ee:16:aa:fd:e0:a3:d1:b7:70:00:0a:5b:
                    65:c6:45:48:80:1f:27:7d:64:5a:29:02:42:c1:71:
                    b2:10:5c:a9:ca:49:dc:8a:19:7c:f9:f9:50:d1:7e:
                    93:36:1d:6a:5e:86:9f:db:9d:61:c0:47:35:9a:50:
                    45:ae:b4:d7:a1:57:7a:28:f1:07:17:c0:ab:45:c4:
                    f1:16:25:65:8a:6b:57:17:60:20:ad:d8:10:1a:ca:
                    a5:81:09:4a:23:c3:16:44:9f:5e:b5:e2:57:d5:ce:
                    3f:c2:42:3d:54:2c:9a:a4:0c:a9:87:f7:fa:64:34:
                    3d:55:8b:9f:52:28:6c:af:96:e9:0d:b5:9c:0d:9b:
                    dc:40:85:c5:42:32:03:5f:3d:19:bb:4f:82:ba:25:
                    79:fb:8e:17:f1:6b:aa:42:19:00:c3:a7:47:74:21:
                    45:7f:79:41:c3:bb:6c:32:d6:61:57:fd:45:0f:08:
                    fb:fc:04:2e:1d:e2:f7:9a:3b:4c:25:df:4c:1b:0a:
                    d9:ae:08:36:39:4a:60:db:fc:e9:72:df:fb:fb:32:
                    92:50:6b:ab:7d:6e:6a:67:18:10:68:8d:ad:23:8c:
                    8d:2b:fd:ef:af:f1:84:e9:a6:6b:41:d5:d6:d1:6b:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:16:A3:58:64:7E:66:0F:55:8A:E6:85:3A:23:D8:98:2B:6D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2b:29:41:24:5d:7a:d8:90:fb:bb:00:ac:c5:52:e4:74:a3:
         61:2c:3a:d1:d5:50:06:52:4b:de:10:22:84:ab:77:f3:09:12:
         01:d3:46:83:f4:85:e6:af:ed:70:b0:4a:b8:43:86:19:ea:14:
         63:20:e4:e2:7d:25:5c:ac:34:bc:c0:31:e2:af:f5:53:a5:7b:
         7b:ac:ad:52:02:fb:37:43:9a:eb:e4:c5:59:0f:71:fe:64:d7:
         29:4a:41:ba:a9:10:ed:8b:4b:9a:54:c2:6b:8c:00:cc:0d:20:
         70:1e:45:76:80:28:5b:dc:5d:0e:ea:2e:d0:c7:93:72:d8:15:
         75:ab:c5:38:42:63:7b:9c:82:8d:7d:8a:81:3a:8d:ed:73:33:
         14:17:09:46:8f:df:e1:82:5d:a3:66:68:31:f6:02:55:1c:52:
         b4:eb:86:88:3b:d7:ff:fe:cd:bc:3b:78:40:f1:25:e6:03:42:
         00:f2:7c:99:21:11:66:90:f6:38:6a:4f:5f:f5:d1:06:07:c3:
         e6:f5:53:00:e3:22:1c:73:19:36:9d:8c:e1:0f:1e:ad:0d:87:
         e4:4e:2b:20:5b:4b:3c:d0:98:6b:da:96:eb:31:4e:03:97:eb:
         a0:ee:da:7a:c3:58:ff:ae:97:bb:0f:ca:ad:b0:30:bf:f3:25:
         3b:c5:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:06:38 2025 by rpki-client