Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ae1d41-328e-35e2-b2cd-54a3fe9e9c4a.roa
File:                     c9ae1d41-328e-35e2-b2cd-54a3fe9e9c4a.roa (raw, json)
Hash identifier:          nvqV4NI/f9V5epep70AkcnDcF/InAxWS6XwzTuuOtV8=
Subject key identifier:   68:1A:A4:32:A3:23:00:CF:94:F8:49:D6:92:AB:D6:1A:B7:33:2F:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16347B3F8C1940DB8E5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ae1d41-328e-35e2-b2cd-54a3fe9e9c4a.roa
Signing time:             Thu 12 Jun 2025 12:42:08 +0000
ROA not before:           Thu 12 Jun 2025 12:42:08 +0000
ROA not after:            Wed 10 Sep 2025 12:42:08 +0000
asID:                     396578
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:63:47:b3:f8:c1:94:0d:b8:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:08 2025 GMT
            Not After : Sep 10 12:42:08 2025 GMT
        Subject: CN=f87e8633-05ea-497a-a74d-ccb9efc28040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:bd:cf:e0:5f:58:71:a3:a6:fd:82:b7:fc:
                    8f:25:e5:8f:82:19:87:bc:0d:a7:a6:78:86:32:e0:
                    30:ab:f7:71:0e:13:ed:aa:a8:b0:df:81:68:20:2b:
                    7c:8e:17:89:d6:07:0b:e3:59:72:a9:66:ca:b1:7e:
                    53:d6:32:66:ee:3f:ab:be:15:06:0c:2a:a0:45:ed:
                    04:75:ad:18:71:f6:12:42:e2:e2:1c:af:b8:4a:aa:
                    cd:e8:b6:38:d5:ac:54:c7:c5:d1:04:4c:9b:01:d9:
                    c9:13:e9:b4:35:d2:5d:41:0b:94:04:60:e3:ae:71:
                    0b:7b:31:3d:e2:71:79:ba:89:87:52:37:78:ad:86:
                    91:38:3b:fb:6f:1b:58:98:43:8f:65:8c:d2:7a:02:
                    b9:fb:1b:a1:cb:6a:c7:da:a3:8c:39:78:46:b7:27:
                    67:86:fd:8f:ce:97:da:2d:9e:a4:0e:19:3b:6d:4f:
                    3f:e2:ac:1f:c7:60:2d:8b:73:a2:38:d3:28:fa:bd:
                    63:bb:d2:97:cc:55:79:9e:2a:4d:88:45:d4:50:3d:
                    9d:87:8e:eb:af:f0:e0:7a:a4:ac:ab:e7:2f:ef:8d:
                    b7:88:dc:a7:2e:4a:00:67:40:73:15:01:a3:ea:a2:
                    a6:9a:73:50:a7:c6:92:67:e6:ee:8d:44:42:d4:79:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1A:A4:32:A3:23:00:CF:94:F8:49:D6:92:AB:D6:1A:B7:33:2F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ae1d41-328e-35e2-b2cd-54a3fe9e9c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:72:30:db:11:ee:df:cd:8a:3e:df:07:1e:93:27:28:a4:
         89:f3:5c:51:37:9c:b6:0b:7c:e1:ce:22:b5:72:0d:aa:a8:50:
         e0:90:86:1e:7e:f2:24:eb:bb:b3:1e:83:09:68:db:0f:cb:44:
         cb:d4:af:5c:9c:d4:6f:74:58:c8:45:60:c6:67:6a:dd:31:bd:
         c7:b4:f8:39:de:39:ac:b8:65:ac:0f:35:1a:d7:48:c7:e5:58:
         9a:3e:c8:70:ed:6d:a1:90:05:d3:dd:89:c8:96:7d:77:45:be:
         13:f1:65:0d:51:37:e8:b1:e9:6f:fd:9b:e8:e9:77:2e:9c:46:
         24:1d:4e:05:f2:81:d6:97:92:3f:ef:49:46:e3:b0:8f:ae:bf:
         f2:fc:ca:92:b7:74:29:d8:d2:66:4c:74:00:ce:d3:bb:e0:fe:
         15:b7:c4:9c:71:67:3b:74:63:3d:d6:f5:71:54:72:7c:cb:fd:
         99:91:40:4c:30:98:ff:f0:2c:4e:ef:4c:5e:1e:7c:88:8b:e0:
         d5:09:8f:c7:aa:ec:72:83:fe:b4:41:81:e0:e6:7b:cd:1b:35:
         30:82:9e:8c:32:4a:a5:b9:e6:3f:2c:5f:08:a0:b5:39:07:c2:
         71:da:ce:d5:17:97:51:1d:ba:1f:7c:01:50:5f:b2:80:05:0c:
         b6:31:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:07 2025 by rpki-client