Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75b1be39-6be5-33d5-9c66-85c17671cf9a.roa
File:                     75b1be39-6be5-33d5-9c66-85c17671cf9a.roa (raw, json)
Hash identifier:          rcxx2XnvBBkgrtlp66Og7GbpK9TM8Zrxr/97ZSL5pVo=
Subject key identifier:   C1:84:CB:A9:00:22:15:D1:AA:4C:E9:24:E7:7D:70:9A:08:42:9B:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B62FF2FB42F1B51AFFE400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75b1be39-6be5-33d5-9c66-85c17671cf9a.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     36623
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:2f:f2:fb:42:f1:b5:1a:ff:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=fc8770dc-ecb5-49df-a6d2-4655f21a2b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:60:24:b4:10:db:24:10:ef:61:08:d6:18:
                    91:b7:c3:13:db:3a:3c:fa:1b:2f:b2:98:83:8a:11:
                    30:44:5c:7a:02:01:81:64:3c:8a:a3:60:4b:ec:bb:
                    dd:1e:91:a0:66:cc:0a:c5:5e:ed:e9:8a:5e:00:09:
                    73:82:cb:1d:a1:85:76:48:cd:9e:34:38:e7:48:50:
                    86:0c:3e:6b:0e:4b:ee:f8:4f:13:a3:5a:75:d5:ea:
                    e6:69:92:5e:de:6c:24:89:72:4b:4e:00:86:a9:5b:
                    3d:38:0c:bc:57:64:37:f1:8f:f5:8a:43:09:37:85:
                    15:d8:eb:cd:27:7a:67:b4:be:cd:e4:c8:bb:b0:8f:
                    cf:3e:ef:1c:23:9b:12:74:7f:7f:f2:cc:73:68:3d:
                    56:a4:d8:82:f0:a6:94:8d:83:38:1d:56:b7:51:0c:
                    80:1f:62:0e:2a:30:d9:d8:ea:70:36:43:f2:39:8e:
                    ec:8d:20:d8:f4:c2:cb:bc:7c:7d:95:8f:b7:85:2f:
                    d6:97:05:cb:fd:2f:3a:90:34:7f:65:35:ea:3d:b7:
                    ed:e7:6b:79:0f:98:2b:3e:f7:cb:76:9b:12:e7:2f:
                    24:c3:86:8f:a7:53:d9:02:05:4e:c5:23:78:0f:2c:
                    0c:91:88:b2:86:88:44:89:fc:f0:3d:9b:e9:bd:f8:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:CB:A9:00:22:15:D1:AA:4C:E9:24:E7:7D:70:9A:08:42:9B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75b1be39-6be5-33d5-9c66-85c17671cf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:c7:01:bf:c0:d0:55:60:cc:d0:b5:1c:6d:ae:02:72:e9:
         c8:62:2c:e6:72:fb:55:45:1c:8f:ab:54:1a:c5:e9:6b:cc:90:
         2f:d8:e5:a8:c6:db:84:48:e2:8c:ca:87:dd:9d:b8:af:28:f1:
         ec:65:93:81:64:91:7e:a8:14:51:32:dd:17:f0:25:05:40:bf:
         4e:a8:d0:39:e9:06:6a:2f:47:0d:be:8d:18:64:28:5f:d0:78:
         ef:32:b2:7a:5e:de:0f:7f:23:40:6f:e2:5b:8a:d3:d9:1b:3d:
         41:cd:7a:24:ab:36:c6:86:c1:35:72:6c:27:58:fe:b3:f3:51:
         07:67:9c:42:9b:55:08:ee:39:89:70:c0:70:d7:c7:6f:4e:e7:
         69:c3:08:0c:02:48:5f:63:24:8d:76:ce:6c:7c:23:be:28:d2:
         e4:68:8d:b7:01:1a:a9:c0:6c:e0:0f:6f:19:97:32:88:93:f5:
         a5:3b:76:63:ea:c5:d7:06:c1:f2:12:86:b6:59:74:32:36:b1:
         e3:a1:91:ff:f6:a6:d0:91:5c:c6:0b:2e:7d:a6:09:df:ea:e7:
         57:ec:7a:29:b1:33:40:ec:d4:c0:0c:5b:d9:3c:f8:58:9b:9e:
         e5:de:ab:e6:c9:ff:4c:65:06:16:8c:e8:39:9d:45:0e:89:0c:
         26:80:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:29 2025 by rpki-client