Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa
File:                     61470e17-1989-38af-9f67-dd9fde729d0e.roa (raw, json)
Hash identifier:          g8ak6hEQfA6Z3pT0/lvWvdQ06TRdnYkBUbh+rgzYZRg=
Subject key identifier:   D4:85:5D:11:EB:AD:26:52:10:8B:BA:B0:75:CD:05:0D:66:10:82:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B62D5346332657DC0D5578
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     397199
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:2d:53:46:33:26:57:dc:0d:55:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=620dbbd4-cc30-42ae-97ec-92bd210b83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:64:d6:c0:4a:c4:08:e9:6e:b7:6c:cc:cc:
                    62:54:db:65:03:cf:13:f7:c7:1a:7b:fa:26:e8:eb:
                    31:45:d7:b3:d2:d2:fc:d1:35:0a:38:b6:33:41:62:
                    8e:73:82:ee:6b:05:c5:55:5b:68:2e:3e:09:5c:b7:
                    74:e9:21:ae:db:b4:82:08:22:25:f7:89:0e:00:e3:
                    58:c2:82:e6:25:9a:da:b0:37:63:a7:e1:7b:e8:f5:
                    d1:9e:b3:61:f9:30:e6:d5:25:f8:f4:18:85:dd:b5:
                    34:b8:a5:10:80:43:40:4f:68:f0:87:d2:dc:55:89:
                    ce:56:a1:3b:32:12:83:20:96:a7:4a:0f:b3:e4:2e:
                    3c:5d:7f:ac:db:d5:8e:0c:12:93:9d:ac:d0:56:aa:
                    ea:be:7a:99:f2:a6:a6:37:5d:86:6b:ab:f4:4e:eb:
                    5b:44:a7:a7:8f:e7:44:1f:25:9e:38:1a:a8:a3:e9:
                    b9:79:22:65:6b:29:ce:57:74:12:dd:59:43:17:84:
                    26:76:8b:4c:1e:e1:2c:56:1e:0e:bf:47:26:2b:96:
                    60:41:00:fc:d2:3c:f0:47:52:ec:f3:cc:b9:e9:c2:
                    14:46:9c:e8:09:96:72:96:4a:bd:1d:c6:09:fd:17:
                    90:6c:df:4d:4f:74:df:87:dc:52:de:01:6f:d2:30:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:5D:11:EB:AD:26:52:10:8B:BA:B0:75:CD:05:0D:66:10:82:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:3f:fb:e9:cd:2c:39:f8:69:40:3c:b0:76:df:0b:67:69:
         0a:ab:d1:e5:14:5f:c2:09:e4:72:c1:c3:36:fe:64:f1:52:a8:
         c9:f9:c4:8a:e5:09:fe:05:f2:22:4c:fd:5a:6d:52:3e:90:9a:
         68:5e:c3:f6:4f:92:f8:69:a8:5f:81:75:ef:f6:00:9a:75:58:
         c0:5d:19:2a:b1:15:b1:d1:6c:82:63:40:53:05:28:27:45:46:
         a2:af:60:79:18:a8:55:f3:79:23:7e:fd:d0:fb:28:c7:a2:a8:
         08:c2:6c:19:ac:f9:dc:98:54:32:5a:d2:e9:f6:0b:c4:e2:25:
         a7:cf:10:ed:a4:78:78:6c:28:44:a8:60:f7:e3:93:b3:c8:01:
         9f:e8:84:9f:af:fb:68:5e:6e:b9:58:e8:91:4a:0f:80:36:24:
         56:69:ae:ed:2f:38:9e:47:2f:a3:c2:4e:24:0f:49:8f:51:8c:
         36:31:c8:e6:08:3b:a7:6a:86:20:28:4f:7f:c1:45:01:1f:a4:
         48:b8:67:72:cb:d7:b6:5a:07:a0:a1:39:3e:17:37:60:81:a1:
         fd:af:47:e5:37:54:80:62:cd:18:18:b1:bc:72:e4:10:2b:b4:
         4f:1a:4c:42:23:d3:ae:34:cb:1c:70:05:d6:10:43:27:8f:74:
         5c:fc:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:12 2025 by rpki-client