Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa
File:                     cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa (raw, json)
Hash identifier:          Q0YYlHPD91IP283USCKpxpgyGKUTJqSbfq+g+27KXYg=
Subject key identifier:   6C:5B:79:DE:4D:11:45:D1:0A:7E:25:7C:7A:8B:74:D7:BB:CD:A4:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DB0E42E91D1728BC93300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa
Signing time:             Thu 15 May 2025 12:24:55 +0000
ROA not before:           Thu 15 May 2025 12:24:55 +0000
ROA not after:            Wed 13 Aug 2025 12:24:55 +0000
asID:                     396545
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:b0:e4:2e:91:d1:72:8b:c9:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:55 2025 GMT
            Not After : Aug 13 12:24:55 2025 GMT
        Subject: CN=e9e94d5c-7251-47ca-a650-9ae458d39c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:69:e2:14:f5:80:ef:a0:31:d6:fa:c4:9e:
                    b9:7f:c4:82:a3:93:d3:87:40:10:26:08:ae:55:20:
                    6f:8c:9d:ee:5f:5a:f6:05:08:6b:23:d6:84:2b:10:
                    f6:2d:94:47:33:4b:00:28:7f:aa:4e:48:2a:2b:cc:
                    9e:dc:f0:21:e1:0c:c7:f7:2f:03:0a:97:f0:ba:29:
                    24:cf:12:31:32:68:5d:0b:cf:10:5d:e6:a5:ef:0a:
                    4e:2e:8f:07:c7:f5:ed:37:6c:a1:3e:ec:61:61:08:
                    c3:fc:05:a5:e9:5e:64:11:3a:ec:49:5f:f3:60:32:
                    12:31:3d:9a:89:dd:01:7d:72:3b:b7:33:20:19:81:
                    dc:14:30:95:47:79:a0:29:31:06:54:e9:44:4c:ad:
                    fe:71:c7:56:13:97:5d:fb:de:f8:ad:e9:41:8b:a0:
                    f1:bb:1f:ca:ad:0c:9e:98:79:9c:6a:59:a0:94:9d:
                    cd:23:6a:36:58:62:61:08:ab:5e:a6:d7:73:96:05:
                    55:3a:72:a0:a0:62:fd:26:4d:3f:47:67:6e:28:0f:
                    8e:eb:b5:43:e7:d2:c0:7d:83:28:3c:3d:64:21:47:
                    1f:64:e5:2b:26:33:c0:42:c0:96:c0:43:c0:d4:ac:
                    52:60:85:5b:f2:96:11:d6:7e:43:e9:7d:9a:58:a7:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:79:DE:4D:11:45:D1:0A:7E:25:7C:7A:8B:74:D7:BB:CD:A4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:40:68:37:82:ad:70:93:6d:f4:32:7f:f8:5a:d8:1f:d9:9d:
         be:72:4a:9f:3e:fd:8c:b6:36:8a:05:f4:1e:4f:01:41:e5:fc:
         2d:00:9b:ba:73:4c:9d:5b:b9:4e:81:1d:ff:f9:eb:d2:e7:e0:
         5b:a0:b3:03:63:7c:2e:ce:ee:ac:4b:bb:f9:ea:6e:5b:bb:27:
         e1:87:3d:70:6d:14:64:a9:de:5f:26:d4:78:b7:5a:ea:cf:bc:
         63:6d:5e:95:14:5e:8d:21:7d:11:73:b7:71:37:c9:5e:fa:42:
         95:44:a9:62:8d:6a:aa:d2:8f:a1:98:80:ac:bf:e0:99:2a:c5:
         47:e2:f0:4d:ae:28:22:b3:51:6f:10:60:8b:bb:5d:2f:83:57:
         0e:a4:9d:b4:75:36:70:6b:04:79:2a:71:08:c2:53:1f:76:70:
         7b:fc:09:41:a4:f0:03:39:f4:98:fd:f7:a3:ce:cb:cc:30:8c:
         f9:e7:70:02:88:11:96:60:23:e7:bf:0d:49:82:ae:c1:ae:2e:
         ae:f0:90:36:17:42:94:3e:56:cf:3e:7b:01:95:92:89:7a:10:
         1b:a7:9c:41:2b:9e:b3:01:21:de:a1:5b:4c:05:ad:0d:ba:8c:
         e1:c7:36:b5:ff:71:2b:17:51:6c:22:67:dd:cd:f3:4b:67:fe:
         38:68:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:08:03 2025 by rpki-client