Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa
File:                     688b0251-f7d6-3faf-a975-4b63a643094f.roa (raw, json)
Hash identifier:          OqS/c6rGv2CKvjkrZJi6yaXWhkpRGx6HuzDH5v/5zTw=
Subject key identifier:   5E:2C:96:29:0E:9C:4F:FC:8A:AA:C8:E8:DD:31:85:90:6B:53:BB:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ABBE63D3FF2415B23F197DCE6
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     397210
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:3d:3f:f2:41:5b:23:f1:97:dc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=9200a567-94b6-4e76-80c1-51222099af2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:cb:36:e8:a7:b7:05:23:06:e1:d2:10:3d:
                    68:f1:58:16:b6:da:28:7e:eb:50:90:e4:30:60:7b:
                    48:13:c1:7c:f3:f7:55:74:47:8f:ae:6b:0f:b9:7c:
                    44:b2:32:44:91:6f:a9:fd:88:5d:8c:9a:22:0b:f8:
                    6b:81:db:4d:0b:3b:01:44:b2:17:c5:cc:bc:7d:91:
                    27:eb:6d:7e:6b:2f:5d:ca:7a:a5:17:55:64:3b:53:
                    d8:81:60:9c:69:0c:92:ab:8d:cd:75:76:dd:71:b7:
                    bc:42:0d:2c:0f:22:81:57:a8:0e:9a:92:92:ae:36:
                    b5:c4:6d:3f:43:7d:44:87:82:b0:9b:ad:6f:e0:1d:
                    3c:d6:b8:a3:e4:94:8e:90:d6:d0:33:1c:59:f2:57:
                    d6:20:4e:1c:ab:de:af:f6:32:6a:2e:4f:3c:e0:f3:
                    3d:63:97:14:ab:41:20:8d:90:2c:fe:ba:c9:8b:cc:
                    b8:f2:f5:a6:56:9d:b6:f8:44:dd:e9:00:68:fe:8f:
                    a5:6f:b7:0f:2f:9a:e2:8a:2f:3a:9b:97:6b:11:4c:
                    df:b4:1a:7f:f5:73:2a:83:eb:0d:35:3d:d5:dd:3e:
                    37:a8:68:49:9c:80:b6:3f:1f:bf:72:e6:45:8b:09:
                    34:69:bb:0f:3d:8e:3f:d4:93:ad:2e:c1:6e:aa:c6:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:96:29:0E:9C:4F:FC:8A:AA:C8:E8:DD:31:85:90:6B:53:BB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:df:89:22:b6:6e:9a:38:fe:4c:59:e2:bc:a2:54:b5:f1:72:
         2b:84:88:76:ef:38:1b:e3:35:08:bd:3f:2d:2a:b7:86:7f:32:
         ac:dc:cb:e8:24:dc:6e:62:d8:03:3f:47:78:4d:00:47:54:85:
         12:e7:47:b3:78:a0:f8:3a:e0:01:f5:7b:18:f7:8b:79:7e:93:
         30:06:6f:2c:3d:01:0d:c7:ea:5b:1c:18:fb:a1:a0:e1:f4:19:
         bd:c0:60:e6:a0:e3:22:79:17:81:38:94:99:d5:de:f1:23:6c:
         28:e6:e8:0e:c0:a4:d7:33:19:6b:1e:0e:6c:3b:3c:65:38:91:
         f8:37:2c:f9:90:a8:52:99:9f:3e:f0:66:2d:d4:77:2d:da:dd:
         7a:9b:14:25:6d:f4:aa:1d:d4:3c:4a:ea:db:ef:a9:90:59:7e:
         3e:0e:34:07:5b:93:5e:39:ce:c7:65:40:48:46:af:03:00:4c:
         b5:5c:81:ae:7e:41:01:77:22:9c:2f:15:ce:e3:ae:e2:c5:29:
         1b:50:3b:f2:9f:4a:94:55:3b:6c:e2:c6:ae:32:76:20:30:eb:
         88:b4:f5:da:82:32:37:e2:00:fe:64:be:ff:7c:b9:8f:ea:62:
         49:88:d0:85:27:00:d1:d7:61:7b:5f:d9:63:80:68:2a:12:e0:
         e9:5c:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:59 2025 by rpki-client