Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3390309-544b-3218-8079-1ad9b04d0088.roa
File:                     c3390309-544b-3218-8079-1ad9b04d0088.roa (raw, json)
Hash identifier:          ZvBVLBTl6qJqLRO8C7wrqEzZ8/2cbo5tQ2uYPr+4fOg=
Subject key identifier:   16:A9:18:8B:2E:31:21:46:6D:F9:78:BD:60:EB:FB:0C:98:E0:F1:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08B0FDEB2500D113E0E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3390309-544b-3218-8079-1ad9b04d0088.roa
Signing time:             Thu 24 Jul 2025 12:38:57 +0000
ROA not before:           Thu 24 Jul 2025 12:38:57 +0000
ROA not after:            Wed 22 Oct 2025 12:38:57 +0000
asID:                     396554
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8b:0f:de:b2:50:0d:11:3e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:57 2025 GMT
            Not After : Oct 22 12:38:57 2025 GMT
        Subject: CN=d49094bd-ae63-4809-a477-1cfec782a657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:46:76:dd:19:44:e2:6b:07:ff:b7:82:35:
                    7b:f2:6b:e4:6e:c5:99:3e:33:6b:4f:e0:79:26:46:
                    0a:12:a7:5f:f2:1e:07:ca:49:3e:97:b0:35:3e:4a:
                    57:97:7c:48:66:78:99:72:03:3d:78:5e:91:f1:56:
                    c4:9d:af:e4:a9:86:c1:68:f1:46:ed:ce:cb:1b:f6:
                    cc:76:1d:5c:f0:5d:82:b0:74:48:fa:e7:d6:1a:32:
                    7d:2d:84:c1:2d:df:cb:c9:d0:43:3a:a3:c3:4e:39:
                    72:9e:c7:1e:94:e8:36:4b:1e:be:db:09:db:68:4b:
                    15:ca:1c:61:0e:ca:7a:38:cf:c7:84:fe:40:e9:10:
                    8a:7a:83:0d:fe:dc:bb:88:dc:7a:07:e4:40:e2:13:
                    c1:db:9e:c6:72:d3:ca:5a:3c:59:4d:05:3d:8f:c8:
                    6f:a8:d3:60:1e:e7:36:12:0d:a2:39:5a:13:c0:de:
                    ee:13:cb:71:55:cd:35:82:d7:c9:f8:c4:b4:ea:0b:
                    8f:9e:88:77:7a:96:c5:9c:5a:69:69:ea:3e:c6:b7:
                    08:18:92:b7:be:d7:10:d4:63:e0:8a:0b:53:98:dc:
                    a7:1e:de:cb:5f:fe:96:64:b4:d5:7b:f1:d9:fa:29:
                    14:25:bf:6e:c8:de:a2:03:bc:a5:16:8a:50:c4:b2:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:18:8B:2E:31:21:46:6D:F9:78:BD:60:EB:FB:0C:98:E0:F1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3390309-544b-3218-8079-1ad9b04d0088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7b:77:23:9f:ce:18:29:e4:76:e2:ff:0a:7e:61:cd:2d:41:
         e3:9e:e6:9b:d4:81:42:b8:ae:42:52:e2:73:0e:80:20:ff:98:
         d9:36:6c:f1:ca:99:95:44:16:85:fe:82:36:85:cc:2a:4c:93:
         eb:3d:1c:54:2d:7e:93:c9:57:93:8a:0f:cd:e1:25:fb:2e:b7:
         1a:cc:c0:65:52:d4:bf:bc:88:ff:f5:57:03:0d:52:b7:f2:0b:
         51:1b:aa:66:8f:f3:5a:a0:8a:78:3f:90:47:ea:2c:5a:c3:ae:
         56:ca:eb:ae:6c:7f:8a:10:56:ee:f2:c2:9e:42:70:85:20:d9:
         19:03:d2:44:f9:50:3f:9a:be:73:4b:3b:e9:db:e6:d7:35:e6:
         f5:a7:3d:23:24:f8:05:0f:cc:59:ca:75:64:08:5b:9d:30:2f:
         0e:e4:b4:06:b9:00:32:30:83:8a:6b:02:95:c5:61:4b:4c:9a:
         49:63:00:75:32:0d:2a:41:19:ec:ba:9a:c0:f2:ea:b9:ef:29:
         9b:be:2c:91:5f:09:f7:25:79:d0:96:d2:bc:b6:3a:92:cd:24:
         ef:3a:3a:64:23:47:9b:35:fd:b7:36:60:fa:44:8f:4c:9e:59:
         27:32:da:d6:7d:56:d0:de:85:d8:53:e5:41:2d:3b:92:b2:01:
         44:0a:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:05 2025 by rpki-client