Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6beea8-800f-3a95-9a2c-154289747478.roa
File:                     7b6beea8-800f-3a95-9a2c-154289747478.roa (raw, json)
Hash identifier:          TstZQrs/PeFdLJRa+F/n7Gih71STMU2OgjkEbZKNrKs=
Subject key identifier:   C2:44:49:4B:2F:21:59:D7:E2:8C:F2:A3:86:CF:E5:DA:F5:A6:07:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07B2930CCA812D7D0DE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6beea8-800f-3a95-9a2c-154289747478.roa
Signing time:             Thu 24 Jul 2025 12:38:50 +0000
ROA not before:           Thu 24 Jul 2025 12:38:50 +0000
ROA not after:            Wed 22 Oct 2025 12:38:50 +0000
asID:                     396542
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7b:29:30:cc:a8:12:d7:d0:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:50 2025 GMT
            Not After : Oct 22 12:38:50 2025 GMT
        Subject: CN=7a155d54-56b1-469f-b525-77bbcebd9168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:28:a7:ce:c3:55:86:93:c3:07:91:b3:0c:
                    e5:cd:c9:a2:1c:42:4e:db:80:7a:20:b8:43:db:28:
                    62:14:dc:86:b3:80:9f:7d:b9:29:08:1f:88:17:07:
                    4f:a2:c4:37:6e:f5:e0:73:4b:76:43:4d:90:06:e5:
                    b5:a5:13:05:4e:d4:bc:a1:93:d8:77:8d:25:e8:b2:
                    dc:c2:0a:fe:6b:3e:e0:2a:fb:30:ab:c8:ff:da:ba:
                    04:b5:fe:08:5a:cd:fb:cc:24:c3:fd:e3:5b:e7:5c:
                    06:94:89:f2:bf:a4:c3:9c:fb:9c:c1:77:10:6b:95:
                    ba:92:ff:df:89:cf:c7:a1:4d:b7:e7:64:aa:ae:b1:
                    08:a9:2d:b0:83:c0:23:65:f4:0b:34:85:2f:bd:4a:
                    d6:b9:82:2f:b6:7c:a1:48:f5:2a:36:dd:af:11:35:
                    3d:ad:9d:1b:ef:bb:f8:97:2c:bb:8b:90:76:54:5b:
                    c8:f2:9a:af:fc:f2:76:4b:9e:72:e8:73:cc:0a:2f:
                    79:a9:aa:81:08:9a:1c:a6:7f:c3:93:f5:a6:3b:ce:
                    a4:db:41:7a:86:45:9a:80:dc:d5:ca:52:a0:87:e7:
                    5b:73:84:c8:68:4b:4d:b6:ad:41:5c:c1:cc:44:72:
                    cb:72:da:51:35:33:91:f4:b4:d1:93:d3:7f:4e:52:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:49:4B:2F:21:59:D7:E2:8C:F2:A3:86:CF:E5:DA:F5:A6:07:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6beea8-800f-3a95-9a2c-154289747478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:03:94:5f:2f:f0:a9:bd:a5:7e:7b:50:2a:17:9b:59:93:db:
         3d:c6:e3:99:9b:d3:68:79:f0:4c:92:c4:31:c1:a7:5c:bc:2b:
         1b:d9:5e:59:1f:cf:7f:79:22:5a:3e:0a:ff:e8:b2:bb:4a:40:
         ed:eb:91:55:e9:b4:dd:85:0e:d9:17:15:63:d6:1f:a2:3b:1b:
         51:95:9d:93:9b:9c:56:0b:6b:72:96:22:8e:a7:f1:8d:82:b1:
         e8:1a:bf:86:32:34:3e:76:f6:62:8b:d6:88:09:96:6b:92:87:
         58:19:be:03:ea:1c:10:82:cb:f9:ae:66:de:f4:2b:82:06:0f:
         2c:36:cb:3d:cb:ca:1d:f9:ad:76:d7:c3:2a:a7:62:27:ed:29:
         0a:1a:6b:2a:bd:f0:6e:49:df:b8:88:60:1f:98:2a:6a:a9:1a:
         9c:74:9a:6f:9c:1c:dc:df:bf:01:c5:ab:73:f1:12:28:b2:0d:
         b0:4c:56:3e:de:46:09:1d:e8:e3:34:0b:90:dd:3c:1c:29:8a:
         f6:50:b1:04:42:1d:aa:d7:2d:ff:1c:c7:4b:a3:93:f5:07:ef:
         19:2c:9a:bf:02:a6:de:da:a3:11:d6:61:3d:11:59:17:e8:03:
         be:e5:41:b0:31:06:c8:e1:ac:8e:2a:04:56:0c:5c:c5:83:ed:
         67:bf:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:00 2025 by rpki-client