Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa
File:                     814fea68-7297-3bb4-810f-f52c14593ce4.roa (raw, json)
Hash identifier:          mgYVapnTi/XnsrSfhzIuzjhi+0w5aNxRgoqAmBqwMcU=
Subject key identifier:   3D:D0:69:16:C3:C9:53:BF:41:F5:02:D3:E7:A4:A2:E9:30:E0:CD:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C642DDBEBD251134D15D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     32651
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:42:dd:be:bd:25:11:34:d1:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=90f36dfe-7162-4067-8dcf-bec0e589ec3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:73:e9:37:93:fb:bf:bc:49:ad:90:67:21:
                    30:0d:89:c8:d8:27:d2:7b:67:c1:6e:12:38:27:40:
                    c8:5c:73:55:ca:0f:a5:eb:58:c5:a0:e1:5a:4c:a5:
                    32:98:5a:10:84:2f:e5:56:9c:86:55:06:07:c1:71:
                    da:a8:4c:60:e8:c8:e6:06:9f:ec:05:d9:9f:b7:1e:
                    70:c6:33:df:14:27:67:9e:53:77:e9:fa:ce:7f:0e:
                    d4:6c:a2:1d:3e:b6:5d:5a:62:f2:47:21:a2:c2:14:
                    1d:7e:73:4b:2c:aa:85:65:76:ac:ac:0a:e8:ce:0b:
                    0f:00:e0:41:46:bc:ad:5f:30:f7:fe:4c:be:51:f7:
                    39:68:01:fd:3d:07:17:20:03:63:8e:0d:67:a6:93:
                    a4:13:0c:ad:1c:62:64:86:d5:fb:1b:27:47:cf:61:
                    f8:c4:3b:0c:40:ce:45:c4:3e:4b:06:7c:a8:d7:18:
                    98:df:5c:24:e0:1a:7b:99:82:5b:c7:2a:4d:c0:52:
                    b8:ba:a1:c7:3d:0a:4b:71:37:52:39:60:8d:22:c9:
                    69:19:00:04:8e:57:d5:c7:3a:fd:a5:58:2e:cb:30:
                    ca:98:d0:f4:7b:38:6c:6c:87:69:ca:4d:ad:6e:4e:
                    94:b5:68:f8:c7:8e:95:25:5e:2c:73:6f:dd:2a:39:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:69:16:C3:C9:53:BF:41:F5:02:D3:E7:A4:A2:E9:30:E0:CD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:67:ab:11:46:2d:e2:1b:34:ab:c7:43:21:ef:88:32:1c:de:
         c6:27:a5:32:93:2c:88:14:f0:41:a9:23:e6:21:23:9c:54:37:
         be:66:be:dd:7d:34:9a:f6:de:ce:b1:a6:12:41:d3:33:fb:14:
         b5:94:77:bc:a8:1e:1a:56:0f:5b:75:d6:18:c1:37:1e:e0:7a:
         80:83:64:12:5a:ce:af:b2:a7:33:74:b4:df:f7:bf:ab:3d:89:
         57:6d:92:4b:0c:96:dc:ff:e7:e2:6b:e2:46:46:5f:4f:56:95:
         44:77:6c:43:8f:d9:91:06:1b:3e:1e:38:95:c2:1f:5a:a6:09:
         50:eb:f8:b3:cb:a7:50:dd:c8:c1:77:67:88:dc:47:2b:1f:92:
         38:5b:e0:0f:a0:fa:4b:cf:68:26:98:27:ca:f5:f0:3b:65:18:
         26:bf:62:25:c0:5f:53:93:02:18:c6:bf:69:f6:e5:30:4a:e1:
         39:b7:28:a0:42:45:a9:d7:35:ed:25:12:03:34:66:93:86:1f:
         68:d3:a1:e9:3a:3c:a6:ef:6c:cb:cc:66:80:6c:ff:84:5a:14:
         0a:e8:67:38:c1:ad:b1:2c:42:f6:1a:72:5c:8a:f8:0f:8f:70:
         95:44:95:79:b1:00:0f:73:b5:94:63:39:c1:51:18:0a:01:52:
         cd:41:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:04 2025 by rpki-client