Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa
File:                     b8421354-f434-37ba-917f-6ca609be55a3.roa (raw, json)
Hash identifier:          8N86JVlWjVC9ALjrSMUU1ham8r+Q69WK1rUCSISM8eA=
Subject key identifier:   FB:DE:6A:F1:FE:4A:13:F0:D0:DC:E3:07:75:2B:B1:A8:A9:95:7B:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172638E6668602920F619900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa
Signing time:             Thu 05 Jun 2025 12:41:22 +0000
ROA not before:           Thu 05 Jun 2025 12:41:22 +0000
ROA not after:            Wed 03 Sep 2025 12:41:22 +0000
asID:                     396608
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:38:e6:66:86:02:92:0f:61:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:22 2025 GMT
            Not After : Sep  3 12:41:22 2025 GMT
        Subject: CN=c21ea44e-42a2-4bb7-8e58-604e1d74d6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:92:4b:d0:97:30:b0:a6:0b:ce:d8:46:21:
                    60:cc:dc:3f:a3:54:2e:34:88:05:0b:2c:9c:d2:69:
                    e5:46:d6:c6:2c:26:71:87:8a:89:e8:ac:18:57:18:
                    db:4e:c0:a4:5b:e5:95:34:43:03:dd:ff:af:01:ed:
                    50:00:b0:cc:01:ac:19:06:a6:8d:3c:aa:2d:db:87:
                    7f:aa:a9:93:93:06:cf:bc:b5:4a:a6:a5:ac:be:36:
                    1d:15:77:15:73:5b:44:eb:cf:84:fc:53:ea:88:5f:
                    70:94:16:4e:03:22:1b:51:f5:f0:78:a1:5c:04:b8:
                    af:db:c8:6f:92:7f:5e:93:df:4b:aa:9c:d1:31:fb:
                    34:27:59:b1:1d:b8:6e:9c:b7:6d:00:b9:d6:ab:41:
                    10:16:35:5d:d5:e2:02:e5:e1:c8:97:d3:c3:b5:31:
                    28:c6:bb:35:1e:3c:06:50:7e:79:6d:ab:44:32:f9:
                    09:a8:ba:9e:b4:7d:f3:79:52:62:57:f9:61:2f:fa:
                    1c:76:fc:38:00:4a:2e:35:c4:ea:07:4a:22:f7:25:
                    30:3a:93:1a:15:8f:cf:84:cf:c4:03:68:a8:a9:12:
                    f5:ad:a5:60:c7:99:67:0b:bd:2c:78:23:ab:78:26:
                    1d:b0:10:d5:37:0e:bd:c5:1e:9a:f9:05:4e:20:f0:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:6A:F1:FE:4A:13:F0:D0:DC:E3:07:75:2B:B1:A8:A9:95:7B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:e3:fc:39:3f:00:a8:1c:3b:64:25:e5:0b:34:4c:6a:ec:
         c5:aa:0b:68:b4:7c:aa:c9:34:92:5d:8d:40:ed:0e:a4:f0:75:
         17:23:80:82:91:06:f4:67:dc:2a:98:9e:f4:c9:a7:24:f9:09:
         16:36:81:c5:20:1a:cd:3d:bb:95:3f:1d:e0:87:d6:7d:ca:9f:
         e7:06:8e:3f:f0:54:9f:2c:61:f9:5b:68:6a:f5:ee:6c:ad:f4:
         e2:8d:18:da:8e:38:cd:80:97:e6:8d:01:19:b8:94:a8:db:5f:
         b7:7d:46:a7:39:8d:75:9f:dd:a2:de:62:5c:38:f6:73:91:6e:
         39:89:21:5b:e1:71:13:37:30:02:bf:72:27:3d:04:95:59:ee:
         d1:38:7d:85:fa:f2:d3:34:83:31:42:89:77:fe:ff:67:5f:f7:
         13:47:92:6e:49:b1:8f:73:30:ca:a7:33:e5:85:0e:29:6a:29:
         35:16:1f:8a:c3:fe:d6:fe:b9:cd:34:07:a0:f4:9f:32:ce:a4:
         e7:23:b8:bf:69:c2:52:14:7b:38:bc:84:95:3c:b5:2c:38:f5:
         61:8c:41:8a:88:24:21:27:36:9f:a3:bd:5b:6a:c4:c2:ef:d8:
         a4:a4:a6:94:c5:d8:08:ed:27:ce:44:1a:1a:38:be:f2:32:d5:
         27:33:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:27:07 2025 by rpki-client