Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa
File:                     fbb64c36-7005-3175-ab5e-e5835f51f110.roa (raw, json)
Hash identifier:          TkvlP3rHJbJEp8rmBD5HxhIGB/ZUEutdumqW4zzmPZk=
Subject key identifier:   D9:A2:51:94:42:E3:20:F2:26:AC:8A:0F:5A:3F:8A:A0:A2:E7:80:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D758A0BE5755A1AEB55B8820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa
Signing time:             Tue 13 May 2025 16:11:12 +0000
ROA not before:           Tue 13 May 2025 16:11:12 +0000
ROA not after:            Mon 11 Aug 2025 16:11:12 +0000
asID:                     396588
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:a0:be:57:55:a1:ae:b5:5b:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:12 2025 GMT
            Not After : Aug 11 16:11:12 2025 GMT
        Subject: CN=f608ebc9-f6aa-40b7-873d-ebd9aee05cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:cd:64:07:1a:8a:29:e7:12:e1:4c:e9:c6:
                    61:bf:1e:c4:06:3d:f0:06:8d:d6:56:77:ee:f8:56:
                    80:cf:96:6e:46:9f:ae:f0:4f:ee:d6:79:56:84:8c:
                    05:2e:89:36:0a:70:f5:d3:63:e3:f9:d3:ff:09:82:
                    5a:5a:c2:a3:a2:50:86:10:a8:8c:5b:f3:b7:37:36:
                    d0:e3:c1:fd:03:74:36:fc:2e:6a:4b:58:19:bc:99:
                    25:b5:86:4b:e4:7e:26:25:f7:b1:3e:82:0d:50:35:
                    d2:60:f8:bd:e6:91:66:d2:68:26:5d:45:2b:53:ac:
                    2c:6f:ea:f2:e4:3e:06:60:51:3e:8b:18:bb:cd:66:
                    6b:5d:09:3e:5b:3b:a8:75:1b:b6:12:5b:96:9b:c3:
                    ff:57:27:d9:8a:6f:3a:c0:9f:4e:e4:d4:52:26:e8:
                    40:f5:20:07:d5:42:ab:ec:c5:25:5c:6e:54:ac:45:
                    b6:04:d1:76:f0:b9:82:93:9f:81:ce:8b:5c:b1:7a:
                    9e:b3:a1:d1:d2:c3:14:13:56:43:b3:6b:ff:07:39:
                    be:4d:ee:aa:b9:a9:7b:ba:49:ea:6b:1c:e5:5e:57:
                    9f:ac:d6:8a:f7:cc:78:bb:19:99:4f:45:ed:1f:a1:
                    24:c0:19:28:5f:92:7c:91:07:1b:1c:b6:f0:35:28:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A2:51:94:42:E3:20:F2:26:AC:8A:0F:5A:3F:8A:A0:A2:E7:80:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:59:97:d8:a8:82:e5:e8:f9:ca:f9:09:dc:2d:3b:fd:ba:6b:
         53:47:60:58:22:cb:a9:72:b3:80:b1:8a:15:81:99:df:bf:18:
         56:ba:42:5a:5c:89:7e:1e:c2:62:11:bf:4c:41:07:99:9e:9b:
         bb:e6:7c:ec:47:77:9f:63:40:cc:84:e1:fd:4a:c8:c0:2f:3e:
         7f:25:3e:cb:fe:d9:32:9f:13:fc:71:ff:f8:51:a4:d9:3f:b3:
         51:b4:c6:9c:0c:bf:4b:69:05:eb:91:60:8d:93:2c:1f:87:70:
         66:30:dd:10:19:0d:a3:15:71:30:08:b8:a0:6e:e1:b0:ce:5e:
         81:de:64:62:3d:f7:e0:e9:02:3c:e2:93:0c:ee:05:5b:5d:64:
         fc:8c:00:9a:15:e7:cb:7f:1b:b1:dc:84:f7:01:26:23:36:43:
         13:37:01:2e:f3:92:ea:ed:1d:26:d5:00:d5:04:e0:39:7f:2b:
         44:2c:c0:50:a8:e2:cf:e1:a9:6a:9a:5d:34:c8:2e:eb:75:09:
         6d:c6:1c:be:1c:9c:f6:e7:41:de:e8:35:0f:bf:db:35:40:27:
         c8:ab:17:7a:8c:63:65:0a:0f:77:21:29:a9:55:d4:c0:5b:ab:
         a4:79:d3:c3:eb:1a:7d:c2:7f:0f:4c:19:82:94:71:01:f0:c9:
         ca:ba:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:01:33 2025 by rpki-client