Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3e07107-9863-3814-9166-78206b3c42ef.roa
File:                     b3e07107-9863-3814-9166-78206b3c42ef.roa (raw, json)
Hash identifier:          YOdeEKktM3mQBm0uKQ1wRsWpJZ/rf3f221Xhv/CqvAI=
Subject key identifier:   EC:CF:F2:0E:AF:62:34:5B:FE:46:B4:5F:D5:8D:BD:F8:8C:0B:E2:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07ABA0F98DECC7BE9E9E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3e07107-9863-3814-9166-78206b3c42ef.roa
Signing time:             Thu 24 Jul 2025 12:38:50 +0000
ROA not before:           Thu 24 Jul 2025 12:38:50 +0000
ROA not after:            Wed 22 Oct 2025 12:38:50 +0000
asID:                     396614
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7a:ba:0f:98:de:cc:7b:e9:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:50 2025 GMT
            Not After : Oct 22 12:38:50 2025 GMT
        Subject: CN=3804cbb1-ccb0-4be4-8102-abeb9a0a2903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:08:9b:40:c1:5f:a6:65:84:93:d9:c2:02:
                    7c:6e:0b:e4:04:27:9f:0d:30:ee:23:ba:e3:b4:70:
                    9b:b2:70:f2:dd:a0:16:80:3f:43:80:6a:08:85:16:
                    ad:de:c6:fa:19:aa:7d:91:8c:42:b2:a9:04:9f:ce:
                    77:57:41:4c:66:5e:5f:11:2b:9e:bc:0c:11:d9:3d:
                    ca:09:8c:ae:3f:64:51:2c:24:d8:fb:6e:10:56:44:
                    f4:de:8b:f1:f0:3f:f9:fc:ba:39:34:20:af:06:5b:
                    95:3f:50:ae:c5:7c:dd:b1:4c:ce:5a:2b:78:7b:c2:
                    5e:18:d5:d3:d6:67:51:4f:12:3b:fc:68:9a:15:17:
                    11:71:53:27:32:86:29:38:b9:e2:6d:75:71:19:23:
                    f9:99:89:c5:ab:9f:47:57:66:74:36:08:d1:03:0a:
                    e6:94:20:5f:dd:60:d7:9b:a6:98:2d:2f:96:52:7f:
                    12:56:79:0c:cf:c4:06:79:92:27:76:19:07:96:3b:
                    a5:55:11:b0:88:0a:bb:b5:2e:06:a6:e4:b7:14:bc:
                    46:8a:6e:b2:41:f5:cf:2c:8f:ba:89:b5:da:af:ae:
                    83:39:82:bc:b2:00:4a:64:a4:0f:b9:8f:4c:0a:86:
                    b4:5d:79:97:e6:99:0a:6f:d2:18:8e:43:ac:b5:e0:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:F2:0E:AF:62:34:5B:FE:46:B4:5F:D5:8D:BD:F8:8C:0B:E2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3e07107-9863-3814-9166-78206b3c42ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:eb:e5:d5:d6:99:a9:59:0f:db:e7:0d:da:b4:36:3b:80:
         f5:c8:27:2e:09:2e:3c:84:f4:91:43:e3:30:ff:4c:03:3a:0b:
         08:96:08:63:3a:0c:f5:3e:c2:6c:cd:ff:f4:55:6c:21:d6:d2:
         49:f7:a5:5a:08:21:02:6b:3d:d1:58:29:3d:0c:5c:c7:6c:cc:
         18:ba:38:aa:bd:90:4b:19:74:ab:e4:5e:05:3e:fe:7b:44:cf:
         16:2b:24:96:02:e6:04:55:4b:30:33:1a:50:37:17:85:e7:9e:
         dc:31:31:62:2a:18:13:e8:70:85:dc:5f:ae:41:aa:a7:2c:19:
         6b:56:a5:15:84:2d:82:04:28:26:fb:bb:b4:e8:30:43:cb:e4:
         39:ca:24:53:c7:69:7c:13:53:7e:2f:41:97:17:42:7e:3c:f7:
         b5:92:de:78:d9:0b:7b:2f:b6:ff:f5:0f:98:8e:25:27:bd:b7:
         1a:6b:87:39:60:5b:35:b6:78:24:e9:4b:68:d3:32:ab:6b:a5:
         65:75:7e:96:af:3b:ea:12:98:51:11:cc:0a:92:e0:7b:e5:72:
         00:66:3a:21:45:75:26:02:16:82:5b:57:47:97:e1:1b:d0:3a:
         ab:ec:0c:fd:36:f4:cf:d1:68:45:75:a1:43:01:7d:e9:e2:4a:
         d1:77:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:34 2025 by rpki-client