Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa
File:                     b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa (raw, json)
Hash identifier:          ggOevqA17Cv3d3JAvMH7SITwsRpYfLikqeqC4odY66M=
Subject key identifier:   1F:94:76:2C:88:FC:27:12:2C:71:8E:A3:15:01:83:19:97:42:02:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B626DF88CB969AFA993500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     25485
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:26:df:88:cb:96:9a:fa:99:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=062c585a-d5c9-4269-b9ce-471f72fd252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:3b:0a:41:69:23:ce:4a:21:c2:96:ef:0e:
                    ee:e0:b3:8d:c2:65:56:dc:ec:56:77:f3:c2:83:6b:
                    3d:5f:40:de:8d:5a:93:da:e0:89:07:9e:91:fe:d1:
                    84:ba:84:85:c1:09:44:91:99:09:3a:b9:da:57:cc:
                    ca:d8:f2:f3:8b:5a:55:87:b7:14:6a:84:77:9a:45:
                    28:1d:f1:2a:5d:92:77:2f:fc:0f:74:d9:6e:4a:d6:
                    91:7a:c9:d6:99:24:7a:42:1a:11:48:dc:0d:12:69:
                    3e:68:5e:aa:b1:63:38:74:6b:3e:42:84:9c:1e:bc:
                    90:39:00:d6:76:20:9a:9b:a0:80:f8:34:5d:69:9d:
                    f1:a9:23:35:db:af:e1:28:25:9d:39:98:92:b2:ea:
                    2f:2c:4c:ee:d7:e9:ed:19:1d:32:20:41:ca:66:0f:
                    52:3c:f4:52:83:b6:5f:6e:bf:e3:6c:d5:66:aa:e3:
                    3c:79:ca:79:9a:8b:89:d7:e1:17:bc:20:dd:8f:ab:
                    10:87:07:1e:2d:61:71:9c:58:ab:e7:36:03:57:07:
                    e1:fc:31:b2:12:1d:6b:10:44:64:c0:23:4a:9e:6a:
                    fa:df:58:95:b4:c7:fd:bc:9e:d1:0d:6f:fb:77:00:
                    1a:77:cb:46:6f:af:74:c3:21:bf:0b:da:90:7b:d2:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:76:2C:88:FC:27:12:2C:71:8E:A3:15:01:83:19:97:42:02:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:fc:01:f3:7e:0f:f3:35:be:bd:38:53:f7:7d:9c:3c:49:
         0e:b4:0b:66:9b:43:d9:be:43:ea:ac:17:76:3e:c2:82:20:3d:
         d7:76:7d:79:02:eb:7d:10:a4:78:1e:c2:54:f4:7d:f1:d1:79:
         49:41:88:ef:19:5c:91:7e:3a:03:55:48:a8:00:3c:ea:00:f0:
         6c:b5:38:bb:2a:ab:f8:90:6f:17:a7:d8:fe:7f:c7:1f:58:93:
         96:22:cb:62:68:31:50:70:b1:e1:f4:34:c8:49:4d:28:e5:ec:
         8a:f3:de:39:8e:e1:ec:8d:5e:3d:78:65:d0:d8:8b:92:9b:a8:
         7b:08:af:83:63:60:2a:16:71:f7:4e:90:6a:38:b7:51:e2:9f:
         5d:8b:8c:30:0c:0a:73:26:96:a9:0b:03:26:11:8b:02:52:b0:
         3b:7f:f1:56:dd:4d:ab:5c:f8:7d:2f:e3:3b:c6:97:a0:5f:56:
         c8:6e:28:28:72:9e:0d:eb:1c:cd:ca:d6:e7:cb:a7:af:7a:fa:
         2c:f0:03:da:fa:f8:13:19:02:36:66:f9:0b:14:55:ce:7d:c4:
         8f:b8:fe:37:3e:ae:b9:f4:4c:56:1c:93:aa:c1:d5:05:6b:9d:
         67:6a:c2:db:87:6b:b1:03:cf:e2:fe:54:e4:11:c6:fe:81:c7:
         8a:f6:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:16 2025 by rpki-client