Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f583f35e-7d3c-32c2-9be0-8c30aa6547ca.roa
File:                     f583f35e-7d3c-32c2-9be0-8c30aa6547ca.roa (raw, json)
Hash identifier:          TR8A07i0cNdCJq9QxBL/+q1mqhd8gVWkbYKzzUUHZQI=
Subject key identifier:   FD:41:F9:D3:43:6D:60:54:94:0B:1E:F0:C5:7C:7A:63:6A:DE:DF:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ABBE6379DFCF93A40E6DFF400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f583f35e-7d3c-32c2-9be0-8c30aa6547ca.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     396610
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:37:9d:fc:f9:3a:40:e6:df:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=32b9113c-8613-47b4-95b5-0919bd6cf546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:00:3c:0e:f9:de:29:41:8b:6c:6a:dd:52:
                    be:73:5a:06:a9:4b:f8:73:ef:85:f4:c0:7a:93:cf:
                    3c:9e:51:82:9c:e2:28:18:70:e4:b1:dd:0f:73:41:
                    e0:48:66:92:76:f3:19:ff:84:36:68:7c:44:3c:25:
                    cd:d4:4c:6f:1d:09:c1:c7:e8:4a:07:a6:92:90:52:
                    80:5e:43:21:b5:f4:6a:2b:d2:63:d1:be:65:96:93:
                    8c:b2:ea:6a:bb:50:a2:2b:1d:43:5c:ef:2d:4f:90:
                    ea:0b:46:54:ce:3f:5a:de:1e:02:13:ee:0f:4e:8c:
                    16:c5:37:cb:c5:18:7c:64:b3:24:f6:26:c4:7c:a3:
                    27:35:be:6f:d0:9e:95:59:26:b6:46:d9:80:30:0f:
                    b9:6f:07:75:bb:cc:ed:a2:4c:55:58:3d:77:02:b5:
                    7d:39:5e:4c:41:16:7a:48:56:67:a8:fd:29:15:e0:
                    bb:e4:8c:6c:15:fc:a4:ec:3d:8e:62:6c:e6:ea:ff:
                    41:78:5e:1a:d5:88:3f:00:95:a2:0c:b6:db:ec:0b:
                    8c:ad:9c:52:19:04:63:e8:fc:62:e0:77:9a:c3:bd:
                    73:3c:6d:4e:d5:33:cf:e2:b9:23:a2:67:c6:67:e8:
                    40:89:f3:10:73:04:16:e3:aa:40:a9:42:e9:04:7b:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:F9:D3:43:6D:60:54:94:0B:1E:F0:C5:7C:7A:63:6A:DE:DF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f583f35e-7d3c-32c2-9be0-8c30aa6547ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:65:39:ef:85:bc:ef:10:49:96:8e:1b:1d:a6:7b:8d:8d:4e:
         69:87:d7:9e:8b:86:e0:9a:99:53:09:84:cc:bd:bc:3e:16:74:
         20:97:f5:f3:84:6d:81:07:39:46:6e:0b:b1:d2:42:87:74:23:
         dc:77:84:ba:f1:f3:1c:5f:ce:e3:04:ab:ae:08:81:2a:58:f4:
         d0:9b:54:3b:45:06:5c:3f:35:42:e6:76:de:53:73:8e:ba:09:
         08:de:0c:41:ad:f6:43:29:91:fb:17:2c:8d:ef:b9:34:2b:a5:
         0c:6a:e6:29:6c:87:37:26:0c:67:5f:7f:1d:44:83:e6:78:53:
         99:58:9f:88:28:a1:82:0b:27:e0:c6:91:f6:92:d1:bb:d0:c4:
         6d:9f:e1:d9:cd:31:94:2e:ed:e2:a3:a8:58:89:3c:d6:a1:9f:
         cf:fa:23:fa:56:ea:5c:d1:ae:fc:aa:67:ac:64:a1:5c:9f:13:
         8c:73:26:ab:13:03:e7:31:29:e3:ee:53:9a:80:40:2e:a9:9c:
         74:ba:80:37:40:42:4f:cc:50:72:fd:1a:ee:1f:6d:72:57:81:
         5e:9b:ba:49:20:d6:55:a4:34:c1:f7:13:92:94:eb:81:a2:af:
         a2:9b:51:80:8c:2e:9f:5f:eb:14:a1:a7:ed:ac:32:8b:dd:c9:
         11:9a:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:43 2025 by rpki-client