Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa
File:                     6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa (raw, json)
Hash identifier:          O44EnqGexCbR7zQnqm1Nrwyq7qTo6bb6Uzq/iqL/lMc=
Subject key identifier:   B5:7D:D3:6E:6A:24:5A:F6:04:1F:C6:C3:5E:AC:2E:5C:08:17:BF:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF0849EC6F6286EB1AA1500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa
Signing time:             Thu 24 Jul 2025 12:38:54 +0000
ROA not before:           Thu 24 Jul 2025 12:38:54 +0000
ROA not after:            Wed 22 Oct 2025 12:38:54 +0000
asID:                     397205
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:84:9e:c6:f6:28:6e:b1:aa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:54 2025 GMT
            Not After : Oct 22 12:38:54 2025 GMT
        Subject: CN=58d4da4a-910b-4247-bae1-3c4fb1117c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:31:ba:fb:a2:f7:89:1d:6d:62:a6:08:b4:
                    88:87:76:89:9f:00:92:73:c8:35:d2:ec:94:92:4a:
                    32:da:ae:b5:3b:07:eb:6d:67:17:68:ed:92:1b:63:
                    48:98:b7:6f:04:db:37:1c:24:60:27:d2:5c:c8:bd:
                    e3:85:03:2f:7a:c8:65:53:e9:30:74:b9:3e:53:10:
                    e1:f5:a8:10:0a:10:8c:75:06:fe:e1:0d:48:6c:e9:
                    d2:22:1c:73:82:49:a7:f7:43:00:7e:54:ab:97:2e:
                    69:87:a1:7e:c4:3f:24:6c:9f:70:99:c6:08:de:8c:
                    c9:b5:6e:8c:c6:b8:a2:ae:bf:80:3a:d6:44:2a:eb:
                    03:ee:54:2d:d7:f8:f1:ce:da:74:d1:07:cd:4e:86:
                    09:e6:97:6b:90:c2:98:b5:3f:0a:f6:27:8d:fb:2f:
                    09:05:84:b2:ba:dd:5f:a8:b3:66:e4:56:98:29:6d:
                    e5:18:50:fb:b0:8f:2a:c8:62:73:42:85:ec:54:eb:
                    2b:9a:6f:32:f6:10:78:80:ab:cd:f9:53:f2:35:9b:
                    ed:f5:8e:30:a5:f0:3c:23:3d:44:ff:8c:5d:e6:72:
                    89:77:da:ee:96:b1:48:66:2a:75:6d:0a:68:47:66:
                    e6:46:07:e9:43:af:16:6f:7f:d9:aa:10:c5:42:25:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:D3:6E:6A:24:5A:F6:04:1F:C6:C3:5E:AC:2E:5C:08:17:BF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4a:3e:0e:89:8c:57:c5:f9:1c:c8:3d:24:3f:7a:c3:1e:35:
         6a:76:57:e4:09:a4:57:1a:2d:f6:f3:ad:f4:da:43:20:bd:05:
         4f:6f:69:7d:69:97:03:2a:fe:0c:af:ab:db:04:59:e2:0c:df:
         5c:ab:ba:6b:d5:94:7f:b3:4f:d4:b7:ea:af:5d:e4:51:94:11:
         51:5f:f5:5d:ed:8a:f9:99:cc:a4:f6:0a:7d:bb:24:e3:ee:1f:
         2b:0f:c9:2a:6c:6c:e3:d2:05:cc:29:81:34:56:b9:58:8a:b0:
         00:0a:67:1c:ff:38:17:23:80:57:29:d2:e0:c8:43:30:ff:72:
         a0:7b:d3:33:55:90:da:90:a3:89:70:7e:3a:40:15:f7:67:e7:
         7d:a7:c7:44:2c:69:4c:7c:3a:af:84:f6:82:fe:37:1b:d0:b7:
         a5:86:bc:63:84:1a:9f:ff:29:84:ea:e4:aa:3a:e7:23:a6:ec:
         cc:3d:66:99:b1:c4:52:c8:2e:44:fa:87:15:11:2d:43:73:4d:
         c0:33:fd:15:ee:6d:ca:e0:ea:be:a8:82:e0:43:a1:e8:72:dd:
         5a:28:b0:f5:75:81:17:81:41:4f:f1:ca:e8:79:df:99:52:ee:
         37:0b:e3:4b:b7:04:20:36:8d:0c:15:ea:71:93:69:1a:44:5d:
         72:f5:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:52:59 2025 by rpki-client