Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08b764b-85a1-33ec-8b17-33397037a169.roa
File:                     f08b764b-85a1-33ec-8b17-33397037a169.roa (raw, json)
Hash identifier:          Luxu2gimR/J7SKGZBEV8ucEQ82X2Q9RP3Y3qZnIynj4=
Subject key identifier:   A1:BC:DC:E1:71:03:2D:A9:EB:6E:DE:0B:B0:D1:D5:68:6F:40:E6:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ABBE63B7C60B8FEEA972447F8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08b764b-85a1-33ec-8b17-33397037a169.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     20431
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:3b:7c:60:b8:fe:ea:97:24:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=bf0fa3b0-ecf0-47c0-91a2-35002e1c1f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:8b:03:77:f4:ef:e7:51:8c:45:8a:35:25:
                    c6:16:cf:dc:ba:83:fd:70:e5:7a:82:20:16:e7:dc:
                    31:91:67:ce:2a:5a:31:8a:f6:49:cf:0f:9f:ef:7e:
                    1c:03:3a:fb:c1:1e:df:04:33:52:d4:b6:bc:b0:a9:
                    5e:df:6a:f3:ec:55:f8:a4:63:2a:e6:5b:b1:b8:69:
                    87:c5:05:fe:d8:ea:54:68:c1:8f:38:7d:76:3f:6b:
                    3d:fe:8a:dd:ef:9e:96:5b:67:50:65:de:47:7a:f4:
                    2d:17:de:e1:cb:dc:b3:56:a8:04:e5:e2:4c:06:e2:
                    ad:00:15:3c:81:fe:62:d0:7f:0d:6d:9d:55:82:b5:
                    c6:74:94:3c:a7:9d:3a:bd:87:1b:af:50:45:8b:1f:
                    a5:56:bc:64:7d:e5:12:c5:ee:9b:20:de:00:9d:f0:
                    b9:5b:f2:72:89:87:43:09:f4:21:25:29:20:bf:38:
                    bd:c6:a6:cc:52:1f:39:f4:9b:78:77:5f:25:52:54:
                    ab:1f:0e:aa:d7:eb:5f:1d:51:3d:49:61:9e:a5:48:
                    a7:a2:d7:ae:d4:25:ee:01:6c:24:2b:dc:c8:10:d6:
                    ee:34:8a:ed:be:43:04:87:de:93:bf:4f:d1:3f:6a:
                    de:87:61:0b:77:9d:a5:61:6f:df:76:7d:4a:28:ad:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:DC:E1:71:03:2D:A9:EB:6E:DE:0B:B0:D1:D5:68:6F:40:E6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08b764b-85a1-33ec-8b17-33397037a169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:e1:9e:45:30:9f:ca:aa:9c:1a:82:76:58:20:93:98:28:
         89:87:7e:1a:48:eb:fc:e6:1a:72:59:06:f3:d7:14:67:d0:c9:
         d5:e4:cd:c4:d4:a9:0f:7d:af:aa:c6:0d:5a:b0:b7:cc:82:f4:
         67:5e:02:93:1c:56:77:8d:3c:85:a4:52:2d:02:ff:89:2b:1b:
         19:06:83:8f:26:2a:a8:03:80:cd:03:27:ec:76:4e:b2:41:69:
         31:d0:7d:db:fd:63:c5:38:64:42:44:eb:a0:cb:f5:63:d6:37:
         95:56:1e:f2:82:f1:e7:d6:bf:6a:64:84:1e:88:1b:c5:b1:c6:
         d3:d7:9a:e2:62:be:69:5d:76:52:44:1f:17:ff:db:04:6a:91:
         a5:aa:e2:82:ab:7c:a9:52:b0:ef:be:16:e0:d8:b3:cd:97:6d:
         e9:71:d1:23:19:21:99:84:77:69:cb:38:72:90:ed:d5:bb:ea:
         ac:fd:80:20:19:c3:82:c7:54:e0:d5:ed:7f:28:ec:26:0a:13:
         d9:2f:e9:45:b0:7d:92:b5:9d:e7:0c:f4:f4:48:d6:41:86:af:
         93:53:d6:2c:41:8f:f4:cd:f1:49:3a:58:9e:c6:07:c6:10:d3:
         14:d8:ff:b3:a5:f5:94:cb:d1:c0:bc:7d:c4:2e:68:c3:f2:13:
         e7:3f:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:29 2025 by rpki-client