Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83f96594-43ed-3ee7-bfd5-faa26ddc4048.roa
File:                     83f96594-43ed-3ee7-bfd5-faa26ddc4048.roa (raw, json)
Hash identifier:          Kmi2V0e6ShOXDYYkmm3IhEuZP9J1CtH0i5EMyiym8hg=
Subject key identifier:   4F:A7:27:77:20:68:F5:E3:66:EB:78:3E:95:0C:AF:F7:89:36:9D:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB15F3CD473E297B6BC9A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83f96594-43ed-3ee7-bfd5-faa26ddc4048.roa
Signing time:             Thu 12 Jun 2025 12:42:06 +0000
ROA not before:           Thu 12 Jun 2025 12:42:06 +0000
ROA not after:            Wed 10 Sep 2025 12:42:06 +0000
asID:                     36618
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:5f:3c:d4:73:e2:97:b6:bc:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:06 2025 GMT
            Not After : Sep 10 12:42:06 2025 GMT
        Subject: CN=b946f12a-ab18-4ad8-9786-77d9f9736c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:c3:63:b1:46:aa:0c:50:3d:c7:8e:ac:6c:
                    4f:e9:4b:0f:ff:96:1f:65:d1:b6:52:eb:f9:12:e0:
                    bf:40:de:a6:68:33:46:a4:7e:13:63:91:c5:5f:f0:
                    09:08:78:ed:17:62:81:8a:5b:17:94:e0:b4:26:51:
                    ce:16:f3:f0:7e:4e:dc:9d:d9:27:cd:16:db:d6:db:
                    d0:d3:90:96:cd:8a:6b:33:0e:f3:3f:f7:1b:50:9b:
                    04:5b:f7:eb:a7:65:9a:4c:a3:5b:fa:cb:7e:99:f4:
                    07:3e:28:fe:f6:e9:4a:68:18:4e:6b:b5:9d:b8:7e:
                    0c:10:8e:37:75:ab:e6:0c:98:de:d9:6a:e3:d5:5e:
                    09:4a:16:2e:35:86:a0:27:33:67:f3:82:42:6c:fe:
                    05:88:fc:a5:9c:eb:f7:1a:2c:ad:ef:8c:c1:60:c8:
                    1b:f2:5a:a8:5b:a5:c3:8c:1e:a1:31:ff:68:ab:bd:
                    00:15:a0:7e:e3:db:63:1c:f9:6b:f2:c3:19:03:66:
                    33:53:33:f1:28:62:07:84:23:20:9a:13:47:41:8b:
                    c2:6e:8b:62:e4:c8:b2:84:7c:98:08:c0:49:81:b1:
                    64:f3:23:7c:24:46:e9:d3:cf:da:f6:5b:c1:d6:72:
                    17:cd:79:4a:d7:db:b4:78:f2:f7:36:7e:aa:06:65:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:27:77:20:68:F5:E3:66:EB:78:3E:95:0C:AF:F7:89:36:9D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83f96594-43ed-3ee7-bfd5-faa26ddc4048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:75:35:26:ee:26:24:e6:da:f4:10:e6:2d:a6:76:ff:ab:
         e9:aa:97:13:fc:a1:54:57:05:89:35:ae:20:6c:8a:da:fe:dd:
         05:e9:40:34:5b:a1:62:57:7c:46:5f:96:36:b5:aa:4d:5e:82:
         5a:de:49:f9:4a:ac:87:0e:49:48:6f:c7:98:a0:dd:96:30:20:
         41:8f:d0:7f:c8:76:2b:f7:58:bf:cd:f3:89:03:58:4d:ab:82:
         f5:19:81:44:31:86:fc:d3:37:7b:6f:2d:28:cb:91:4d:be:76:
         63:6c:1a:ed:99:58:c6:3e:6d:d9:0a:f2:f0:e6:63:c8:16:46:
         fb:9b:0a:61:d3:6f:d6:00:4d:ea:89:64:b8:ea:29:fa:c1:b8:
         9c:a4:88:1e:df:e0:b7:a2:88:4d:21:56:86:15:59:32:5f:fd:
         7f:e0:38:78:d1:62:68:c8:d7:d7:a1:28:2d:5f:e7:ea:09:17:
         81:8c:cf:8b:62:77:2a:50:0e:68:9f:4a:c7:54:5d:e3:63:dd:
         9f:65:72:38:19:c4:94:e7:7a:88:72:ab:8c:84:47:9c:46:27:
         ef:3a:67:20:5e:bf:4a:9f:33:9d:e9:b3:aa:4a:f8:fa:14:be:
         90:c9:40:24:13:fd:99:42:4f:ec:d2:33:64:31:1c:ae:d6:f5:
         84:3f:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:08:54 2025 by rpki-client