Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a53513d-ce6d-32d5-a7d3-dbcafcb497dc.roa
File:                     6a53513d-ce6d-32d5-a7d3-dbcafcb497dc.roa (raw, json)
Hash identifier:          nXCy2qiLDczx1cUyPRi/0s+UVu3Zt9BTNNi0uY11TiE=
Subject key identifier:   31:F9:34:D9:53:83:12:40:58:E2:E8:49:B4:0B:67:58:99:51:81:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63A4ABCE425CCF78A2860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a53513d-ce6d-32d5-a7d3-dbcafcb497dc.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396565
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3a:4a:bc:e4:25:cc:f7:8a:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=6698cee6-7c55-4b70-9148-0d5a5c0c7900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:2a:ae:36:92:8a:ae:8d:e6:49:62:66:01:
                    c4:c3:8e:85:88:67:c3:ad:36:45:eb:c1:99:1c:4d:
                    77:05:b3:43:fe:54:aa:8d:62:c3:ff:18:68:0e:ad:
                    75:8b:cf:40:31:59:79:1d:84:74:2a:ec:5a:92:26:
                    f4:dd:ca:a0:2e:ae:d1:11:c5:cd:90:00:26:85:72:
                    d6:ad:12:77:d8:2e:c1:f6:f4:9b:59:80:20:2d:53:
                    2e:14:30:cd:94:1a:69:32:0c:7c:f4:4c:09:7d:20:
                    ee:fe:1e:21:16:90:0c:8a:92:dc:79:d4:46:3a:c3:
                    dc:a8:f6:3c:5c:dc:9e:0a:56:c6:2f:9d:30:df:31:
                    d3:d1:41:f5:0c:2b:a8:41:d4:43:4a:00:43:a3:30:
                    71:25:8b:b6:89:fa:a5:62:0d:b6:52:e2:19:73:fe:
                    4f:85:59:e0:1c:ca:57:7c:79:9b:2a:e2:f7:42:0e:
                    7f:a5:88:06:34:27:7e:74:92:11:6f:ff:72:39:fa:
                    a5:88:17:c1:64:4e:67:81:a3:fa:80:55:17:db:4e:
                    7a:69:c2:01:72:ec:7f:e4:3f:7b:72:88:8a:e9:81:
                    fc:ea:da:69:e7:b8:21:8c:0c:cc:03:ee:7a:19:06:
                    cd:e6:0c:5e:66:18:f9:8c:03:05:c5:e3:d4:db:5f:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:34:D9:53:83:12:40:58:E2:E8:49:B4:0B:67:58:99:51:81:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a53513d-ce6d-32d5-a7d3-dbcafcb497dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:28:5e:4f:27:ec:58:99:cf:c9:0b:f2:90:7a:35:b2:06:
         53:00:d4:d2:72:68:7a:80:84:06:e4:ac:2c:c3:35:9f:6b:dc:
         01:81:7e:6e:1d:9b:5e:b3:2d:3f:ba:fc:cd:45:d3:e4:5a:61:
         84:7f:61:fa:67:22:5a:52:9b:28:38:e4:e3:67:e4:76:0d:b2:
         f8:cd:4b:5d:2a:93:5b:36:87:80:53:9b:1f:f9:11:5c:86:a1:
         ba:77:42:56:30:4d:38:ae:dd:d2:8b:01:83:0b:e8:66:6b:4d:
         14:91:3e:90:28:31:be:aa:df:5b:d7:e8:64:f7:5e:87:9c:e8:
         a9:e2:f9:6a:99:f4:c3:dd:ec:fc:b9:32:f2:e0:e8:fd:c0:20:
         38:30:67:c7:ab:d9:88:80:7a:c2:03:ac:0c:c1:59:eb:13:26:
         2c:b0:83:c2:12:06:1d:c7:64:42:1a:67:dd:19:26:86:3e:60:
         de:68:73:59:75:71:27:41:e2:ee:7f:25:08:f4:0b:db:82:3b:
         b7:16:44:83:91:6f:48:fb:82:8a:a8:77:c6:4f:77:77:5f:18:
         14:f2:dd:86:7d:3c:84:e2:9b:df:7d:66:15:73:60:de:cb:5c:
         9b:f2:7f:8c:ce:67:b3:46:78:27:94:ed:f3:06:79:4f:8b:03:
         b1:1b:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:47 2025 by rpki-client