Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
File:                     b3230797-9752-3a16-a896-808d3a6c520b.roa (raw, json)
Hash identifier:          wIv4zHBrvxr+muDP8D25mQ1zwjp6X9+Lz96zGpFKubA=
Subject key identifier:   C9:C9:87:E1:88:8E:F8:ED:C8:8D:B9:0F:7C:2E:86:64:7F:3D:09:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1726459FDA108E3855958A94
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
Signing time:             Thu 05 Jun 2025 12:41:28 +0000
ROA not before:           Thu 05 Jun 2025 12:41:28 +0000
ROA not after:            Wed 03 Sep 2025 12:41:28 +0000
asID:                     20362
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:45:9f:da:10:8e:38:55:95:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:28 2025 GMT
            Not After : Sep  3 12:41:28 2025 GMT
        Subject: CN=faf73f17-29fd-4d55-9add-f45078244db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:a5:a9:95:c0:7c:d3:37:1e:ad:79:6f:a9:
                    b7:10:91:65:7b:f8:bd:8d:a8:75:20:b2:89:a0:fd:
                    64:fa:be:cd:d1:eb:0c:82:c5:5f:63:a1:6f:d3:84:
                    6c:d5:f7:ef:d2:34:11:9e:1b:fd:d5:88:0d:6a:3d:
                    4f:01:cf:48:a6:43:43:fa:4b:d8:40:c5:2a:52:5a:
                    91:87:1e:c5:a4:e9:73:54:80:d5:2f:89:9c:77:16:
                    1b:b7:08:fa:7b:00:0b:42:e0:14:26:a4:ae:26:2d:
                    d7:c4:fd:84:e9:54:6a:05:0e:fe:09:e4:12:fb:56:
                    76:b0:b7:a5:12:d5:db:c1:07:1f:30:f5:90:47:98:
                    49:11:97:77:2d:1f:09:8b:2f:41:95:d6:57:21:f9:
                    42:af:71:fb:5a:cc:6a:bd:b1:79:3e:89:24:87:f5:
                    1a:9f:b1:d5:3c:0d:85:6e:11:ef:49:8e:76:07:3d:
                    aa:dc:14:5e:36:bd:05:25:7e:f8:59:91:13:bb:6b:
                    b4:7f:46:64:0e:0e:6d:c7:91:dd:24:7a:af:36:48:
                    c8:6e:96:48:8b:92:e9:31:37:a8:26:46:15:9c:59:
                    f1:2c:c1:c8:6b:19:f2:1d:6a:4c:ca:6d:33:b5:e2:
                    47:03:cc:97:b4:ff:6b:e3:cd:d1:f6:7b:2e:09:4f:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:87:E1:88:8E:F8:ED:C8:8D:B9:0F:7C:2E:86:64:7F:3D:09:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:8d:0e:53:87:50:fc:9f:07:81:c3:28:45:31:98:51:e7:
         56:38:f5:60:9a:2a:6b:db:2b:8a:22:67:21:6b:d3:7c:48:75:
         ce:3b:74:6d:9d:70:b8:63:8c:a7:8f:9c:23:63:06:b2:cb:12:
         9d:fe:a2:8c:c1:41:c9:00:5d:ac:c1:69:2b:d5:a1:ee:4c:b6:
         e6:b9:1f:32:7f:d5:9b:c0:a3:6e:20:0c:9d:a2:49:37:98:49:
         1b:1d:30:fc:3c:37:5c:7c:11:74:aa:91:dc:5a:a0:ba:44:16:
         9b:6b:6e:37:4b:f3:0e:1a:e9:67:7a:fc:9b:8e:62:85:9a:86:
         59:3c:60:71:4e:f3:53:7d:64:ad:ca:b8:6a:54:b4:46:18:2b:
         39:ef:cd:cc:a4:c0:a5:d3:12:ee:f5:bc:8d:92:fc:3d:6b:8e:
         56:d6:93:0a:73:f1:ad:a7:e4:bf:dd:17:e5:d2:22:9f:ae:d3:
         b8:48:82:d7:64:74:c7:e3:a4:80:58:1d:b1:f1:b2:b1:e4:6f:
         11:d6:8f:5b:ba:af:7a:38:01:e3:40:ed:32:40:2d:d2:83:05:
         cc:5e:c7:b2:ec:e4:c5:24:2b:d3:78:47:b4:e2:d4:e6:24:c0:
         ba:85:85:78:9e:cb:ae:a5:e5:ca:18:53:80:6c:51:33:59:c3:
         41:f6:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:57 2025 by rpki-client