Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa
File:                     e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa (raw, json)
Hash identifier:          C4saf6t3dxQaZ/IbU2up1FeX3Ixf1+7debslBnhPJPk=
Subject key identifier:   B8:64:70:B3:92:EC:61:9C:17:29:A7:4F:D2:FA:C6:2A:31:A8:B1:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172641277BA13250E546C750
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa
Signing time:             Thu 05 Jun 2025 12:41:26 +0000
ROA not before:           Thu 05 Jun 2025 12:41:26 +0000
ROA not after:            Wed 03 Sep 2025 12:41:26 +0000
asID:                     19836
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:41:27:7b:a1:32:50:e5:46:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:26 2025 GMT
            Not After : Sep  3 12:41:26 2025 GMT
        Subject: CN=13394297-0cf1-4d87-92c3-b15fe0bcef7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:20:1a:89:23:f7:ea:9d:40:e0:ad:d0:ab:
                    85:31:15:fb:d0:e3:02:f9:50:85:fd:f4:5e:ee:01:
                    50:8d:aa:fb:5a:89:c9:b3:ce:d5:c1:2b:db:67:a1:
                    18:93:69:d5:b0:b3:4f:3d:de:c5:52:80:83:05:65:
                    6f:e2:aa:22:24:bb:c7:4b:18:54:dd:6e:77:8e:90:
                    e9:a7:23:ab:a8:3a:9a:79:3d:c2:56:f3:f0:28:07:
                    3e:df:bd:a6:a4:9f:f2:24:9c:6a:b1:7f:f8:60:ed:
                    f0:12:04:4c:12:ce:75:6b:d4:b7:34:26:87:99:02:
                    60:b2:e4:f9:dc:cb:69:f8:91:ca:c7:40:9c:93:ba:
                    c9:af:ed:f6:ec:f3:60:88:b7:3b:94:6b:e1:45:37:
                    59:c3:cb:9a:69:c6:b7:91:2a:f8:21:2d:a9:57:0a:
                    8e:b0:36:78:e9:24:e0:ae:09:10:bb:67:7f:93:13:
                    0b:4e:fe:91:00:36:c7:e6:30:3a:50:6b:9a:2f:12:
                    45:a5:0c:46:cf:59:a2:a3:40:71:1b:59:68:ca:3a:
                    fd:c4:91:98:93:9b:fb:97:36:c8:bc:6c:78:5c:1c:
                    2f:b0:a3:c2:62:bc:eb:71:41:33:4c:b8:ad:e4:42:
                    69:45:bd:c1:9f:8d:0f:57:65:76:d6:e8:d5:7a:05:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:70:B3:92:EC:61:9C:17:29:A7:4F:D2:FA:C6:2A:31:A8:B1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1c:5a:11:9e:41:a2:92:22:8f:b5:2a:57:e0:f1:db:f2:68:
         bb:29:61:bf:5d:2c:8b:db:ee:47:8e:6d:44:fd:60:74:26:7c:
         8e:ed:7a:56:79:37:32:31:cc:2b:03:1f:7e:65:21:7a:56:68:
         90:1b:c8:0f:b7:1a:d7:e7:54:17:bc:3a:91:81:3d:17:36:af:
         15:c3:13:82:9f:e6:83:e4:64:2b:1b:ed:38:3f:59:63:d8:3a:
         e0:14:03:e9:9e:69:ef:8f:18:0c:ed:e0:d3:d2:98:47:ba:eb:
         20:a6:a3:92:d0:39:e4:df:a5:1d:c6:3b:1b:87:b8:d3:be:5c:
         67:42:86:30:b3:83:1f:bb:bf:01:ae:48:34:8d:ac:41:d8:b2:
         b2:ef:52:48:96:42:67:81:37:e9:74:09:63:2a:86:d4:7d:bc:
         64:0b:a5:a9:0d:da:03:e5:36:32:56:db:0a:cd:0e:8b:ae:dd:
         aa:b9:df:db:e1:c1:3b:8d:37:4c:fa:aa:01:90:85:00:6a:48:
         e3:46:b4:95:c0:fd:ea:c0:8c:99:37:e7:c7:b1:eb:da:78:c7:
         7c:68:fd:b8:d4:13:1f:b9:91:18:c9:94:17:39:cd:d3:e4:b9:
         1e:ac:a2:79:1b:5b:f4:eb:cf:ac:6c:b4:1f:8e:21:17:34:09:
         2a:e8:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:49:29 2025 by rpki-client