Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa
File:                     c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa (raw, json)
Hash identifier:          vxDfmsfzb6dg5MiyO7Yo24vPuUXrzU7LVQ3BR1ahhP4=
Subject key identifier:   68:08:EB:BE:2C:12:B6:F3:DD:5E:0D:7B:1B:55:65:25:DF:A0:97:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B62D8DD99A56F2EF14CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     20172
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:2d:8d:d9:9a:56:f2:ef:14:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=f96e0490-8f79-4d96-a8ba-d09e3e11921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:bb:b8:fa:17:bf:b9:6b:cc:89:87:46:e6:
                    68:4a:4f:52:da:e4:47:f0:d6:a9:6a:be:d8:88:49:
                    f3:f5:06:58:c3:fe:0f:b4:53:4e:b5:17:c6:c9:ea:
                    6d:41:c6:96:58:7d:38:f9:5a:71:13:60:3b:62:bb:
                    90:3c:44:40:4d:7d:6f:b2:14:83:80:5c:a3:a6:a7:
                    53:d9:ba:df:f4:b0:a5:32:9c:5e:0e:c6:60:c0:b5:
                    46:3d:34:75:b9:93:1c:3f:0b:30:28:26:b1:4b:50:
                    3f:62:cf:57:a7:e6:6d:79:69:6b:21:15:6f:a9:9f:
                    c4:25:7e:ff:c8:3d:bf:8a:ab:84:f3:a1:8e:d7:a6:
                    a0:8a:f4:72:cf:07:ab:e6:14:a1:ce:d5:0d:ac:e3:
                    c2:1d:3f:94:4b:e7:9c:20:dd:77:cb:39:fc:4b:23:
                    8c:b2:e5:e3:b2:22:7e:57:15:f3:58:7d:ac:1d:9a:
                    3f:67:c8:f8:6e:eb:ef:7f:7b:18:3a:0f:ff:78:af:
                    d1:90:22:bf:38:5c:46:3e:84:4c:1b:c2:ce:f6:2b:
                    38:33:e3:a7:aa:f2:8e:f8:f7:a6:4e:31:bf:27:12:
                    8c:98:e2:14:85:e6:1e:40:33:f0:90:75:84:0b:c8:
                    60:17:26:08:5f:72:ca:56:5c:fc:b5:aa:96:b8:55:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:EB:BE:2C:12:B6:F3:DD:5E:0D:7B:1B:55:65:25:DF:A0:97:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b0:16:d2:61:8e:91:80:85:08:14:58:56:62:42:4d:1b:17:
         56:42:c3:6d:f7:13:5f:60:bb:10:e0:0c:4f:20:a4:7e:0f:2b:
         09:2c:c5:a4:23:67:b4:a5:90:4f:3e:54:7c:6d:df:01:4e:6e:
         d5:e0:b8:0f:a0:25:0c:f6:bb:0c:e0:9e:ea:99:ac:d6:f8:2b:
         60:59:d9:d9:61:5b:8d:49:fe:82:c7:60:ea:6e:5f:7c:dc:77:
         4b:24:19:47:29:ec:e9:74:80:0e:8a:a9:0e:a3:6a:7c:c4:04:
         07:9e:bb:8f:48:92:cf:3b:8a:54:2d:d0:2d:47:9e:ab:1f:41:
         65:0c:6e:d8:11:69:b8:77:4d:07:d2:0a:51:75:ab:1d:c6:10:
         d6:3f:8b:99:18:a6:a0:01:08:31:d4:30:8c:ed:6c:ee:53:1e:
         08:54:8c:bb:75:ee:17:7c:78:82:c2:dd:a5:b5:29:bc:37:1a:
         55:30:ae:cd:f4:05:99:c4:3c:ff:90:e0:1c:1a:97:2f:39:79:
         e3:0f:09:51:f3:a9:3d:00:ca:6a:9c:4e:12:dc:e6:54:1e:ab:
         d5:52:44:6f:16:6a:eb:22:f6:cf:01:7d:dd:c0:9f:b6:38:59:
         5b:a1:16:53:82:e7:a7:dd:f7:49:b9:8d:26:11:c0:d3:a7:db:
         6a:fc:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:59 2025 by rpki-client