Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
File:                     003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa (raw, json)
Hash identifier:          Ic5XNcZbbvldKqhvMrYa/oO1LwIZlTMGfRS72TDpWW0=
Subject key identifier:   C9:80:7A:4D:12:99:17:52:31:2A:F8:D0:58:84:B5:DA:3B:1E:4D:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41EDC4ED96AD785351D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
Signing time:             Tue 17 Jun 2025 12:36:43 +0000
ROA not before:           Tue 17 Jun 2025 12:36:43 +0000
ROA not after:            Mon 15 Sep 2025 12:36:43 +0000
asID:                     211369
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1e:dc:4e:d9:6a:d7:85:35:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:43 2025 GMT
            Not After : Sep 15 12:36:43 2025 GMT
        Subject: CN=c1317656-c090-47cf-8f2c-032b1d2561f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:8a:ae:b4:1b:a7:f6:7f:62:73:51:56:ca:
                    c1:63:9a:70:60:f5:22:29:20:61:47:c5:4f:99:06:
                    11:d8:cf:1b:fb:a1:21:f2:53:2f:e2:d9:19:0f:f5:
                    e6:db:0c:95:ba:b0:d2:66:0e:1f:3c:87:d4:1f:b4:
                    2f:7e:f5:78:49:fb:f9:78:be:e6:5a:be:69:f6:9c:
                    ea:11:97:6f:8b:6f:6d:e5:3a:6c:c6:2c:b3:fb:8f:
                    c6:62:5a:bb:c6:09:ce:9f:10:48:0d:30:23:f5:15:
                    87:83:59:20:2b:79:6f:d8:1a:c3:d5:5f:74:ea:77:
                    75:ec:69:ec:ae:d2:e0:cb:61:1e:85:01:42:ad:65:
                    d0:07:7c:6a:3c:5c:d4:96:ae:61:79:c6:57:11:c3:
                    95:a1:d8:9f:a7:a7:77:fa:ee:b0:8a:57:ec:ab:a9:
                    31:b0:a5:32:fa:6a:71:3b:70:18:3f:36:51:3d:87:
                    6e:5e:3a:b4:92:68:b0:f7:2d:fe:10:bd:52:59:7f:
                    99:18:23:a9:9f:46:a2:79:55:76:db:73:c4:20:2c:
                    5f:31:2e:06:37:b3:db:f6:24:e7:de:07:32:7a:e4:
                    ec:b1:8c:c3:b0:c1:84:8f:ba:9d:59:74:80:e4:d5:
                    a5:1c:79:bc:e0:d8:09:4c:68:ac:d2:06:02:db:ae:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:7A:4D:12:99:17:52:31:2A:F8:D0:58:84:B5:DA:3B:1E:4D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:37:7f:a0:bc:09:c0:fd:37:56:aa:87:5b:39:99:88:ad:6a:
         52:8d:f4:34:2b:49:4f:87:95:7f:2f:c7:33:b5:e5:c8:d5:6b:
         e9:1a:da:4d:a2:83:82:6d:83:ba:23:3c:fe:57:e6:29:56:92:
         49:84:47:ef:6c:85:9f:20:03:18:cf:15:62:91:0c:6b:7d:e2:
         9d:93:06:9f:f7:f2:8f:00:b3:7c:a0:f5:4b:69:4b:c6:20:f3:
         47:d9:c0:64:bb:42:c2:d8:22:99:23:f7:d8:f9:26:31:87:83:
         e9:13:7f:23:a2:65:16:af:09:49:ff:99:a5:62:0a:7c:7d:14:
         d7:eb:0e:ad:1c:66:d0:80:ce:0b:31:1a:1c:44:3b:c1:b2:11:
         48:6c:54:89:4d:4b:00:6f:b2:88:fc:ef:b3:63:cf:82:d7:b4:
         73:9b:92:56:95:73:fa:47:f5:8a:35:d9:a4:48:49:e7:85:06:
         93:8c:59:e6:4d:c7:f8:e0:49:b9:61:39:4f:58:93:5e:6b:7c:
         5c:ae:ff:9c:3a:37:99:86:6d:a9:eb:d7:3d:49:9f:ec:c6:08:
         20:9f:20:f0:99:b9:c2:bd:cf:55:e9:5e:50:90:10:d6:b5:35:
         22:56:ad:d8:c2:0e:17:86:eb:2c:a6:9f:c2:3a:00:48:0b:15:
         12:4d:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:38:38 2025 by rpki-client