Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa
File:                     e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa (raw, json)
Hash identifier:          xa+FUEqdGwjhud4BIY/GpiehZei8XOSXIOTsPjbkiOw=
Subject key identifier:   2B:3A:19:AF:AB:CA:71:7B:0E:B0:AE:CD:92:3B:8E:DE:49:AF:E7:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DAFF48F5CDC5D09AB01C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa
Signing time:             Thu 15 May 2025 12:24:54 +0000
ROA not before:           Thu 15 May 2025 12:24:54 +0000
ROA not after:            Wed 13 Aug 2025 12:24:54 +0000
asID:                     396608
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:af:f4:8f:5c:dc:5d:09:ab:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:54 2025 GMT
            Not After : Aug 13 12:24:54 2025 GMT
        Subject: CN=07befcfa-2962-43ab-92a3-6ca805bedeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:4f:2e:50:ac:11:f3:89:d0:f2:0c:ea:3c:
                    a4:19:7f:b6:a4:88:9d:2e:55:b0:8a:00:5c:7e:63:
                    d9:c8:9f:66:f0:48:a3:a1:10:ef:6c:3b:2e:9d:f0:
                    0d:47:18:8b:94:76:22:7e:75:eb:d4:f2:d2:18:e3:
                    6b:1e:5d:9f:0c:8f:01:47:15:9f:b1:e0:30:d8:c4:
                    9f:67:3b:8f:db:d1:14:40:fe:3e:3f:05:e4:11:b1:
                    70:5c:02:7d:36:52:ff:96:f2:8d:a1:8c:1f:cb:1d:
                    67:b9:b5:b9:78:c6:7f:c4:8b:1d:2f:2d:4e:65:7c:
                    01:b8:6e:45:cc:10:a8:f5:78:e0:25:4a:da:99:5a:
                    ae:ff:cb:c8:7f:1a:55:24:dc:8d:07:5a:53:b4:60:
                    d4:a6:00:3b:b4:0f:4b:16:7d:bd:04:2c:40:8f:85:
                    fa:44:06:b7:82:3f:b4:6f:d8:f3:36:2f:ef:77:51:
                    05:b9:5e:12:01:1c:e2:7f:b9:b8:66:dd:57:e6:a4:
                    e9:a3:2d:7d:db:fc:87:f2:68:35:78:61:af:4a:b8:
                    e0:db:8a:0a:30:e5:d6:16:79:8f:ef:87:88:35:44:
                    f7:87:80:ad:e3:51:18:a1:ab:80:82:6c:65:ad:28:
                    12:5e:3f:ad:a3:0c:50:c6:f3:32:df:81:5a:9d:09:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3A:19:AF:AB:CA:71:7B:0E:B0:AE:CD:92:3B:8E:DE:49:AF:E7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:51:c0:1e:97:88:1c:1f:86:57:e3:48:dd:b1:c6:06:9f:
         14:fc:30:7e:79:d2:d0:f9:70:d2:57:9f:2d:0f:a6:e9:bc:fc:
         43:de:06:84:ad:9c:96:30:75:69:1a:e1:b6:37:12:7d:87:21:
         5e:bf:c4:a9:de:2c:90:7e:c7:1d:78:d3:18:02:d6:5a:7e:cf:
         cf:de:6b:6c:85:16:14:5e:0e:08:42:10:7c:8c:46:ec:76:8b:
         ba:2f:9f:18:e0:fd:b4:f9:a0:ee:0b:71:01:c1:ea:d6:98:ab:
         15:d9:bf:b4:50:a2:fb:d6:c6:d5:a1:83:4d:2a:3c:eb:bb:1e:
         53:93:2e:1d:33:88:a0:d0:54:c7:ec:de:1e:94:1f:67:b2:f1:
         92:58:c7:63:cb:61:73:8a:db:21:64:4a:6f:b1:3f:b9:41:03:
         a5:25:ff:30:dc:18:41:e9:39:26:27:71:09:19:3e:7e:c6:9e:
         c0:89:9c:90:d6:47:50:e8:16:2a:51:8d:83:d6:79:82:23:44:
         a0:ab:89:f2:70:c5:90:2a:8f:5d:40:c2:0b:79:ff:7d:4a:d2:
         de:63:41:8a:8e:9d:62:1d:13:35:e9:dd:15:57:a2:61:a3:88:
         0f:db:f8:d9:82:e6:26:33:f1:3a:09:a5:19:0a:88:7d:b8:90:
         4b:40:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:10:33 2025 by rpki-client