Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa
File:                     cb21bf29-fafa-3421-90c2-08bd785a108e.roa (raw, json)
Hash identifier:          9ZVjG1FWMxLmRHefPKj6BE8Q5P6BjKyM3G8f3jBYkDE=
Subject key identifier:   FF:AD:F5:7A:D5:E4:A3:06:15:D5:3B:65:67:7F:D1:F7:C1:86:F8:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DACEDE40CD492FBD12EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa
Signing time:             Thu 15 May 2025 12:24:53 +0000
ROA not before:           Thu 15 May 2025 12:24:53 +0000
ROA not after:            Wed 13 Aug 2025 12:24:53 +0000
asID:                     36626
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:ac:ed:e4:0c:d4:92:fb:d1:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:53 2025 GMT
            Not After : Aug 13 12:24:53 2025 GMT
        Subject: CN=4183219c-4580-4a6d-be8d-5b69a0f81027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:b7:23:58:e9:cc:eb:fa:d1:fd:89:87:54:
                    fe:a3:c3:0e:f3:07:f9:f3:b3:16:53:51:df:9b:b4:
                    69:57:77:bf:9a:6d:3c:73:90:21:ce:ba:42:98:97:
                    4e:df:e0:bc:2f:a1:9a:4e:07:42:6c:5c:9e:8b:df:
                    cb:e0:f7:8b:28:3d:96:b0:d6:1b:28:da:a5:ab:c1:
                    18:60:47:ac:6c:1f:a3:9b:fb:c8:f2:1c:a6:f0:91:
                    e4:70:2e:d6:1f:91:d7:2a:e2:46:ba:b0:57:04:88:
                    ca:a3:ed:af:b7:1d:2b:07:93:a5:c0:7e:d2:5c:e9:
                    e5:b1:1a:43:0d:39:f6:d9:c5:d2:4f:ad:24:3d:f9:
                    b9:18:b1:41:33:b8:38:4f:1e:a8:42:e8:f4:69:19:
                    25:e5:b2:ef:80:df:c3:5a:f0:c3:41:7d:b9:64:ce:
                    79:e9:d8:4f:89:b2:cd:bd:20:aa:82:c6:77:1c:c5:
                    4c:5d:c8:5d:b1:79:55:74:3c:bd:23:0d:31:95:e0:
                    4e:72:57:86:f5:5d:ed:b6:5e:3f:c2:77:6f:63:ea:
                    de:35:a6:83:32:2b:2e:dc:1f:cc:4e:76:32:50:32:
                    c1:af:c6:86:06:b3:1d:03:27:09:23:3b:8b:55:cb:
                    eb:b3:22:64:b4:c0:cd:5d:52:fc:bb:55:59:a6:a5:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:F5:7A:D5:E4:A3:06:15:D5:3B:65:67:7F:D1:F7:C1:86:F8:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:98:19:53:42:b9:51:1c:ed:5e:74:20:3e:bc:07:54:17:
         70:9d:5a:aa:3c:d0:35:a9:bf:53:11:94:bc:ac:db:a4:79:63:
         13:5c:c5:f4:49:d6:18:a5:bf:fc:84:36:dd:a8:c9:de:8d:ca:
         43:91:3b:74:12:07:65:f7:e5:af:6f:96:f7:81:ae:0b:a7:4e:
         d0:c0:8e:cd:e6:4f:68:26:33:89:80:db:4a:e4:a6:2c:cf:4d:
         c7:c8:d6:38:33:8f:05:c7:43:70:1e:14:1c:55:a3:2d:ca:bd:
         7f:f3:4b:8d:c5:ce:67:0e:62:b6:1f:12:d1:88:a2:a1:77:ab:
         61:a5:4a:67:bc:98:1c:cb:48:e3:38:a3:24:05:77:9f:48:9a:
         77:3d:17:48:c4:61:bb:ad:8b:8b:79:c3:fe:05:52:06:7b:07:
         d3:34:d7:85:ed:8a:d7:2d:f7:29:8b:61:18:93:f5:67:d6:45:
         f1:61:07:66:3d:25:0b:9d:58:a6:35:45:97:08:b6:fa:21:0d:
         6d:1f:9b:7f:86:99:12:1f:de:34:eb:4e:d2:35:8b:a6:fd:b2:
         b8:bc:78:41:e1:a9:e5:63:6b:ee:b9:58:92:b6:28:56:34:22:
         01:8a:7b:80:9e:02:f1:a1:0e:0e:58:af:70:d5:20:13:71:66:
         2c:c0:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:44:11 2025 by rpki-client