Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa
File:                     b7a39608-303f-33fc-a6e7-6db748feaa03.roa (raw, json)
Hash identifier:          U/fHyxLmP7VPB2ao6uaOqRSHRM48IFa6Xh+0aaaWA7c=
Subject key identifier:   E6:1E:BD:98:26:EE:17:D5:F3:AF:63:E9:52:81:42:F8:E7:46:7E:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB169536921812E7BD26200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa
Signing time:             Thu 12 Jun 2025 12:42:10 +0000
ROA not before:           Thu 12 Jun 2025 12:42:10 +0000
ROA not after:            Wed 10 Sep 2025 12:42:10 +0000
asID:                     396564
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:69:53:69:21:81:2e:7b:d2:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:10 2025 GMT
            Not After : Sep 10 12:42:10 2025 GMT
        Subject: CN=ea58d6e4-0684-47ad-bda9-e595f3ab1434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:2d:8e:b7:81:0f:27:7a:9d:bb:b5:85:28:
                    41:3c:78:78:72:75:a4:9e:a5:bd:fe:77:ec:4f:c1:
                    29:60:6c:54:2a:b4:6f:c1:76:40:38:ac:a3:85:73:
                    2f:d2:7e:55:57:a8:19:0f:65:fb:5e:24:83:ff:f7:
                    53:a3:49:07:ad:97:3a:69:c4:f3:29:14:8a:e1:f9:
                    bc:cf:c5:70:d9:0b:fb:38:c8:35:2b:97:a9:f4:47:
                    eb:ae:0d:44:80:b0:b7:5c:4f:ef:d9:c2:3b:2f:87:
                    04:7a:0f:63:e2:44:24:52:03:98:e2:86:40:eb:16:
                    97:49:02:e2:ea:91:ff:7a:cb:27:ac:1d:b2:a1:43:
                    01:1c:a8:39:d2:2b:4d:d5:9e:45:f4:e6:db:9f:ab:
                    29:b8:ea:b0:30:78:3c:40:21:f7:8d:8d:f0:96:20:
                    75:84:7b:26:3a:65:52:26:27:a5:ca:f0:26:ed:a0:
                    a1:43:7c:24:13:25:0f:54:32:31:94:c7:d8:52:c4:
                    da:c6:02:07:e1:f7:f0:3c:1f:7b:20:f5:d0:be:90:
                    e2:0f:07:60:a6:36:d6:9b:d0:bb:f3:7d:b7:a6:21:
                    0b:e5:bf:fd:d6:07:17:5e:d4:fd:4b:1f:b3:50:5c:
                    07:19:3c:e8:fc:27:83:3c:92:7e:6b:9c:98:0f:5d:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1E:BD:98:26:EE:17:D5:F3:AF:63:E9:52:81:42:F8:E7:46:7E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:16:b2:bd:ab:17:cd:05:cb:56:a6:09:ac:c1:be:ef:a4:
         69:9f:a2:65:d5:ce:bc:5c:9c:79:19:0d:6b:ac:42:4d:27:97:
         fb:ac:01:4f:be:7c:7b:35:f4:57:6c:d8:19:9e:c3:7d:1d:c8:
         cf:e6:00:a4:ba:d3:35:54:e4:58:34:5b:e4:26:d9:b8:b1:6e:
         9f:90:2d:b0:b5:c2:c1:c4:56:d8:18:85:3b:19:2c:46:d6:7a:
         8c:d3:7b:db:65:6c:dc:85:9c:17:76:68:1e:0d:6b:05:fd:2e:
         d3:65:c6:2f:89:2d:de:b7:21:70:5d:d7:0c:c8:7f:d8:4e:34:
         cb:53:d5:36:7f:e0:fb:9a:e2:3c:9b:ad:0c:86:b8:83:b9:1f:
         f6:c8:b0:c3:fc:13:b1:b3:cc:15:63:4a:81:fc:1f:56:7a:e3:
         4d:71:b0:07:58:f5:71:0b:c7:4a:86:9b:4f:8d:a9:5d:14:0d:
         23:52:82:d1:34:91:89:87:25:59:4b:5c:36:dc:da:23:a4:e7:
         1f:43:d8:b2:9b:b7:bd:34:e7:1d:46:f3:a9:0a:02:82:54:8a:
         4c:28:fa:5b:c2:6d:b8:25:90:bd:24:fd:9a:e9:68:ec:1c:67:
         91:9a:98:8f:14:1f:5f:b5:19:fd:3f:e6:5a:72:d4:4f:53:85:
         ce:15:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:21:43 2025 by rpki-client