Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa
File:                     faaa56f5-1820-36ec-b884-395416ab06a0.roa (raw, json)
Hash identifier:          EcKtjBXbSVvgrKwj0R1Y5GXv9eHSyiGQPIEJtJABqaI=
Subject key identifier:   BF:43:29:8C:C2:D0:18:35:2A:4D:4E:89:C9:AD:DE:61:59:A8:C7:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07F10517A64A3B5AB3B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa
Signing time:             Thu 24 Jul 2025 12:38:52 +0000
ROA not before:           Thu 24 Jul 2025 12:38:52 +0000
ROA not after:            Wed 22 Oct 2025 12:38:52 +0000
asID:                     396582
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7f:10:51:7a:64:a3:b5:ab:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:52 2025 GMT
            Not After : Oct 22 12:38:52 2025 GMT
        Subject: CN=37ef0d01-0bb7-44c2-ab03-962b54ba59e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:29:66:12:1a:fc:49:bd:95:9e:ab:31:84:
                    37:c4:a9:68:bb:85:5b:e4:2b:a0:26:ef:85:19:6e:
                    3e:47:c6:00:30:b0:d9:b8:df:98:51:87:0e:a7:d7:
                    51:4e:17:f9:34:bc:27:85:af:19:60:5c:4f:cb:98:
                    47:98:f0:b5:ab:98:bd:b2:af:28:cc:cc:95:3a:36:
                    c3:04:7e:e6:9b:1d:80:5e:c5:d6:5c:4c:52:0f:35:
                    b8:a7:66:b3:ab:0e:7a:5f:77:f5:3d:da:c4:62:8c:
                    80:fd:5f:52:f2:b2:af:d2:82:5f:ed:53:72:1d:56:
                    4a:f7:14:02:2d:de:28:24:94:09:7b:9b:59:17:9d:
                    4e:af:89:33:db:be:de:bd:b5:1f:35:65:a1:b3:19:
                    fb:a2:6d:93:9c:2f:c0:f2:7b:58:28:dc:b5:05:9e:
                    c9:1b:20:49:b8:3f:8d:8b:f2:99:fe:ef:df:c1:d7:
                    70:e8:cf:23:3f:d3:cf:42:b2:94:91:ec:ff:4b:54:
                    50:73:31:2c:5d:0a:72:64:0b:c3:54:93:e9:8a:57:
                    7e:9b:0b:e9:33:b8:fd:5e:12:e8:b7:ec:b0:bb:87:
                    7c:d5:f7:ea:15:25:fe:6b:a4:92:d0:68:ee:31:1d:
                    66:81:d6:66:7f:83:90:3c:73:19:39:ca:42:ea:ff:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:43:29:8C:C2:D0:18:35:2A:4D:4E:89:C9:AD:DE:61:59:A8:C7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f7:ab:ad:bb:25:ac:5b:a9:d7:db:ea:56:20:10:93:a8:d6:
         89:13:5b:d9:d9:c6:c4:75:25:ca:d9:64:fa:da:1e:73:30:54:
         3f:7a:17:26:b8:b9:af:c2:ea:57:fb:23:8b:85:78:3a:4f:a5:
         42:43:74:c0:bf:b9:14:41:85:f1:c4:72:d9:ee:65:08:32:aa:
         ec:ac:b0:ec:23:45:01:f1:c2:e3:e1:ef:3e:44:f5:7e:42:f0:
         77:c2:2a:29:94:7f:bc:20:09:23:2f:50:f5:38:da:45:aa:0c:
         b5:1e:52:c1:fd:e8:8f:4c:e2:c3:cb:ea:9c:14:8e:7b:65:24:
         1c:3d:90:53:e1:3e:b6:cd:d8:f2:ac:b4:2b:6f:ba:92:5f:fe:
         9e:26:87:35:c3:60:e8:d8:08:64:28:dd:4b:9e:b0:35:17:2f:
         b0:ef:f7:02:d2:c5:50:10:c8:34:71:13:38:d2:94:5c:d5:00:
         11:4a:e2:47:51:2b:4d:a6:b2:ef:90:ca:40:30:95:fa:fd:84:
         4a:4b:54:1d:6e:92:06:5f:89:71:46:72:50:3e:ed:e0:e7:99:
         f8:93:76:62:d5:91:6b:35:22:c3:96:ec:30:5a:da:9b:33:96:
         11:a9:8d:83:b7:03:bf:a0:d2:ed:3a:4e:2b:a0:36:52:55:16:
         c4:37:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:10 2025 by rpki-client