Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba7b2eed-5659-35b4-8f6f-f4433675fcd4.roa
File:                     ba7b2eed-5659-35b4-8f6f-f4433675fcd4.roa (raw, json)
Hash identifier:          P0pJM1fA61qrn0U53h7B1vZ93liIThETkAU4u55lW3I=
Subject key identifier:   6D:A5:93:37:28:14:A4:B7:16:E0:91:64:39:20:EB:68:46:CF:FD:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D758B1952BA26ADA62271580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba7b2eed-5659-35b4-8f6f-f4433675fcd4.roa
Signing time:             Tue 13 May 2025 16:11:20 +0000
ROA not before:           Tue 13 May 2025 16:11:20 +0000
ROA not after:            Mon 11 Aug 2025 16:11:20 +0000
asID:                     397211
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:b1:95:2b:a2:6a:da:62:27:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:20 2025 GMT
            Not After : Aug 11 16:11:20 2025 GMT
        Subject: CN=2054c475-429c-4a11-837c-29a53ebd5d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:b6:10:29:3c:8a:f0:d2:81:ba:ac:5a:91:
                    a4:e3:a8:fa:ff:98:9c:61:bd:96:dd:55:90:4a:a0:
                    b9:18:a2:8c:ab:be:a4:5c:b7:6a:4c:ba:ef:09:6a:
                    06:31:c7:b4:5b:7b:d8:68:22:ec:ac:29:b8:1b:39:
                    c7:7e:0e:21:a0:b6:aa:9d:ca:82:a5:05:2d:c0:50:
                    5f:1e:bc:71:d7:d6:42:a1:1a:17:4f:b3:81:11:0a:
                    fb:ac:ef:6b:4e:5e:b1:96:22:ed:15:c5:41:1d:63:
                    87:e3:de:6a:cd:09:65:71:74:e3:35:38:2d:d7:b2:
                    64:8f:e3:50:7a:5f:a4:27:31:1c:8b:4f:cf:14:f0:
                    65:0b:8c:4f:04:a1:a4:bc:e7:82:27:12:9a:ab:a1:
                    3e:c7:10:11:79:43:78:12:ad:33:e9:ee:42:1e:f0:
                    be:c2:d3:77:39:1d:96:ef:e2:0c:8b:36:03:ba:c6:
                    f8:8b:8c:a5:07:65:46:e1:13:69:5c:c4:42:0f:27:
                    7f:83:83:d6:a0:f9:d4:85:26:af:da:89:80:b2:a9:
                    54:ef:b0:5e:87:14:66:41:bb:d2:28:35:cd:16:5f:
                    70:9a:33:ec:d8:45:ae:c2:b7:56:d1:f1:84:c2:7d:
                    fb:1c:72:b2:3e:47:5f:8b:70:85:93:b0:b7:7c:da:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:93:37:28:14:A4:B7:16:E0:91:64:39:20:EB:68:46:CF:FD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba7b2eed-5659-35b4-8f6f-f4433675fcd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:8d:5a:2a:07:f2:30:f7:75:7d:48:1a:8d:30:04:8a:2a:
         1c:86:e5:43:cd:f4:7e:6a:8a:9d:f5:9d:68:19:46:bf:23:2b:
         4a:dd:f6:00:17:ea:14:a4:aa:ab:18:c4:ee:14:f9:8a:4b:d4:
         2f:e7:74:82:c7:fb:9e:5b:41:b5:7c:95:00:da:cc:33:08:e9:
         67:b5:02:4b:33:d7:27:de:b4:42:37:2c:2c:a9:46:70:c8:59:
         9e:04:88:ed:27:5f:53:d2:55:f4:9d:22:fd:da:f6:a6:de:4a:
         d6:bf:bd:74:e9:11:d1:0d:8f:a2:e9:d8:9e:10:63:a9:b8:5e:
         ef:8a:6a:9b:01:47:aa:2e:50:f6:b9:0d:42:64:a8:80:82:ba:
         4a:e8:1c:6a:b1:da:a0:77:39:29:a6:ef:e1:6b:53:fa:fc:80:
         a2:36:a9:63:61:39:40:12:d3:fd:37:0b:e8:dc:f0:16:78:ad:
         ae:c1:89:a1:08:4b:91:14:6e:ed:ef:f7:7b:75:16:29:a6:c6:
         f3:db:4e:34:7f:d3:39:9c:af:83:04:70:b1:fd:66:30:62:29:
         49:28:3e:a0:4b:25:b1:44:d1:6a:94:1f:5b:42:16:1c:7a:05:
         d4:62:f7:c8:3f:34:26:0d:f4:28:62:cf:4b:b9:e9:c8:85:f0:
         a8:2b:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:04:19 2025 by rpki-client