Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e301bd0f-02a8-370a-b7e2-c3f1232b5907.roa
File:                     e301bd0f-02a8-370a-b7e2-c3f1232b5907.roa (raw, json)
Hash identifier:          FB+PEp59bEd+byonCPbWmygcT+Z0izC+Lqnk2YYP8Q0=
Subject key identifier:   3F:D2:9A:68:58:9B:3C:8F:AF:A8:D2:8D:14:2C:92:C2:8B:26:AE:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63F535490D54B02EBCCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e301bd0f-02a8-370a-b7e2-c3f1232b5907.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396540
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3f:53:54:90:d5:4b:02:eb:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=39539a35-05df-4c43-8cf7-f95c0005ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:5b:dc:08:31:df:39:c3:1a:61:f1:77:5e:
                    01:fd:f8:ea:d5:a0:b5:03:3f:5a:df:42:c9:46:68:
                    a5:4f:2c:93:f5:ca:2a:45:81:99:05:1b:b6:c4:79:
                    bb:1a:a8:39:17:e4:89:df:15:47:a4:b1:fc:a8:4b:
                    65:20:be:3f:29:33:26:1e:09:3f:ea:91:24:8f:6a:
                    41:e9:e8:43:32:b1:d4:3b:0d:9c:c3:07:0b:bd:77:
                    dd:5d:04:98:c8:71:55:fa:dc:62:02:17:c0:1c:56:
                    7c:cb:39:7b:61:5c:a5:4d:48:38:e6:c6:75:0c:fb:
                    20:bd:3f:bb:b8:1e:be:55:ae:97:87:7e:e1:43:f7:
                    8d:14:f8:f8:48:8c:72:e5:e4:55:f2:16:1a:dd:2e:
                    0f:ac:61:72:78:76:8f:fa:c6:b7:f0:68:fd:c4:f7:
                    d4:fd:49:a0:d0:b9:5f:27:15:34:a8:a5:a5:a0:a1:
                    6c:3e:8e:d7:bc:c7:a5:60:04:4e:8d:34:3a:8e:c6:
                    03:23:9f:f4:b7:4f:00:15:8b:bd:5c:09:3b:3a:9d:
                    70:72:de:ce:16:b4:b3:40:8d:e1:1d:1b:ed:d7:14:
                    84:0b:b2:63:d3:e0:c5:6d:dd:30:59:e7:18:9e:af:
                    29:f9:21:f0:fb:f6:ad:42:69:f7:72:ee:09:d8:d0:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D2:9A:68:58:9B:3C:8F:AF:A8:D2:8D:14:2C:92:C2:8B:26:AE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e301bd0f-02a8-370a-b7e2-c3f1232b5907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:40:4a:c7:2e:19:95:28:64:6c:72:e5:4a:9c:1f:81:f9:
         85:f0:b6:1f:f6:df:15:07:0d:a2:01:a1:37:0a:4b:79:01:42:
         7b:12:0d:9f:28:53:1c:c4:ef:41:f1:ed:cc:ae:96:fa:48:26:
         f5:a5:29:5a:ed:7e:98:74:66:e0:a8:21:78:71:91:bf:b6:60:
         4a:8f:7c:6c:8a:2b:f6:7b:bc:ae:46:ac:a0:86:af:e2:01:9b:
         f7:97:90:4b:b4:0c:d0:af:c7:4e:5d:12:32:cc:ce:13:d4:be:
         8d:94:a8:40:a2:3a:60:5e:a8:34:47:82:73:0f:8c:9a:8c:2c:
         74:b8:6a:f4:94:50:73:a2:fc:6e:94:36:5c:99:91:ca:99:b2:
         0f:68:dc:8f:5e:a3:a2:13:98:90:4b:61:f0:f7:32:b4:2e:fc:
         1f:0c:70:c3:4f:a1:1b:6f:8b:82:c5:0f:76:75:c3:ef:44:fa:
         38:bc:92:d3:10:5f:88:ce:84:ad:fc:d2:e8:f2:00:9a:73:07:
         24:99:f1:2e:36:31:0b:2a:ed:0d:4b:bc:17:79:52:74:a7:70:
         77:4a:57:ad:09:55:30:fa:e0:ac:33:19:4f:c6:9d:e3:8c:81:
         a1:3e:74:79:51:7f:82:0a:5b:6e:12:8b:39:08:37:f9:56:e3:
         57:6c:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:21 2025 by rpki-client