Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de257799-34ab-3d11-af70-3ff199923d8d.roa
File:                     de257799-34ab-3d11-af70-3ff199923d8d.roa (raw, json)
Hash identifier:          kGqyO9DPUF71N6+KdlIPje2D4pLDpcv1i+AAbXcZFJ0=
Subject key identifier:   39:05:EF:95:8D:68:C2:9E:84:5E:6D:11:26:B0:27:60:61:45:12:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ABBE63DDFEAAF579F5939FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de257799-34ab-3d11-af70-3ff199923d8d.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     396562
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:3d:df:ea:af:57:9f:59:39:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=2f0057e0-5d6f-4847-95ba-2a5d5f4d2755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:5f:f5:07:4c:ad:68:e1:f4:77:dd:61:21:
                    ea:9b:98:bc:16:ef:b3:af:1d:52:3b:7a:37:d3:33:
                    58:07:4b:16:28:86:ae:e9:c1:88:42:51:33:98:5c:
                    97:5e:6e:06:4e:c9:69:a5:e0:52:b1:6c:07:d7:5a:
                    df:25:eb:62:71:9f:01:bb:71:b3:57:d5:ad:14:ff:
                    1c:55:26:a0:eb:c2:c2:e2:9d:c4:c1:0a:60:ac:93:
                    9f:8c:96:c5:bc:f0:8d:50:4c:3b:4f:0b:14:20:59:
                    e6:04:be:73:47:ad:50:f4:ec:fd:d3:b3:d7:22:19:
                    7d:b8:e3:e8:f4:53:32:97:6a:a7:de:ee:f8:74:69:
                    0b:08:21:28:00:84:dd:2a:ad:b8:5d:03:94:83:3c:
                    68:11:70:0c:9b:de:2a:ce:6c:d3:65:a0:52:c8:cb:
                    c9:e9:bb:f2:21:52:a9:36:5e:89:1a:19:75:38:82:
                    5a:80:bf:63:77:51:0c:ea:12:ec:96:d1:7e:37:6e:
                    4b:55:5d:80:e5:83:e8:2d:38:03:17:c8:b7:ab:f3:
                    c5:e0:03:77:6b:58:b8:bf:eb:fb:7c:ba:04:35:99:
                    aa:b6:96:48:35:9a:30:3d:1f:20:0b:d8:dc:7c:97:
                    42:7a:ce:40:32:14:f4:4b:b3:79:5e:fd:5c:8a:84:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:EF:95:8D:68:C2:9E:84:5E:6D:11:26:B0:27:60:61:45:12:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de257799-34ab-3d11-af70-3ff199923d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ea:06:d0:34:4b:37:82:49:0d:e1:4c:f9:50:73:d3:54:ba:
         8f:d1:80:e5:fd:12:cb:ea:c6:2b:32:07:34:d3:2a:c1:8c:b7:
         0a:62:55:7b:c3:a3:0c:1a:63:b7:16:86:63:47:f8:9d:4e:0e:
         73:56:77:2b:17:1e:23:06:96:6b:67:57:7d:76:38:74:89:e1:
         11:b3:d8:5b:c4:df:c2:36:8b:2d:bc:49:df:6a:d2:01:a6:b8:
         b7:f9:ce:e6:4d:b4:9d:e3:b9:61:fd:41:e2:47:67:05:96:5f:
         c7:52:9f:74:36:0c:68:dc:92:43:2e:95:e4:dc:58:ca:1a:43:
         69:5e:68:9a:01:56:5a:c3:06:b2:06:28:12:6f:5b:24:cf:5f:
         29:2a:66:d9:37:2c:60:65:59:83:60:0a:9a:86:a7:22:65:8a:
         8f:f4:ff:ff:36:8f:5b:12:ee:bb:77:71:df:0f:92:fd:ca:8b:
         79:0a:f8:72:eb:70:c6:7f:c4:50:fb:66:ab:39:b5:6e:3f:a7:
         8e:8c:d6:ee:76:7a:df:cd:79:e1:0f:41:27:53:f3:0c:dd:cd:
         21:7a:1b:a8:e1:52:6e:e2:ce:9d:ae:18:db:8b:58:5e:98:cd:
         73:c4:c3:5b:4f:d7:14:ad:e9:0c:5e:ec:8a:42:0a:1b:2e:94:
         2e:a2:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:40 2025 by rpki-client