Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02015581-8c1d-3d21-ae28-ff87e2bca240.roa
File:                     02015581-8c1d-3d21-ae28-ff87e2bca240.roa (raw, json)
Hash identifier:          AffFCuWLlthsqPWRe0zIlCBqR5XhebN0XODTueSbn2o=
Subject key identifier:   16:C0:6D:D0:1D:C4:21:D3:D2:A0:5E:EF:DF:48:28:0C:D9:26:AB:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6FA06A8B7031C3C4E110C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02015581-8c1d-3d21-ae28-ff87e2bca240.roa
Signing time:             Wed 18 Jun 2025 12:38:22 +0000
ROA not before:           Wed 18 Jun 2025 12:38:22 +0000
ROA not after:            Tue 16 Sep 2025 12:38:22 +0000
asID:                     396542
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:a0:6a:8b:70:31:c3:c4:e1:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:22 2025 GMT
            Not After : Sep 16 12:38:22 2025 GMT
        Subject: CN=e1ac96d4-94a8-432d-aa3d-06b3513b38ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:81:29:72:56:cc:ed:51:75:27:1f:c0:eb:
                    81:02:ad:59:dd:88:8a:00:cc:12:49:50:bf:2a:25:
                    a1:9a:f8:55:40:80:64:91:f3:ea:68:53:42:8f:a0:
                    72:01:dd:3a:9e:dc:7b:a7:ff:c1:47:e6:37:cc:72:
                    ed:0a:6e:ec:b5:d6:8e:5b:e6:22:00:e4:f1:a8:12:
                    05:da:70:47:53:d9:f0:ae:37:bf:3d:1d:eb:89:7c:
                    f3:a2:0e:62:f6:3d:df:25:9e:3d:f2:e9:c1:4d:74:
                    ff:0f:d9:3f:0b:5a:d0:a7:5d:d3:97:4c:10:55:da:
                    73:c0:cc:cb:2b:be:94:f8:e4:03:d6:2c:dd:30:20:
                    62:d9:15:f4:1c:9c:79:56:0b:8c:6d:12:49:2d:04:
                    5f:28:a5:fc:73:dd:2c:a8:9e:b3:56:d9:12:d9:00:
                    d6:af:95:29:d4:3d:5d:67:23:b9:82:18:8b:2d:79:
                    c2:00:f3:1a:8d:5c:31:69:f6:63:b9:0c:c9:c5:bb:
                    87:43:37:c8:21:9f:2a:77:bb:3d:75:12:d3:b7:b4:
                    25:ec:9c:e3:d7:06:a0:e2:22:16:6e:ec:25:c9:61:
                    37:aa:88:32:d2:9a:25:e5:7e:51:8a:f2:10:19:ed:
                    16:76:d3:c4:68:8b:43:88:c4:99:5f:d9:c2:26:19:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:6D:D0:1D:C4:21:D3:D2:A0:5E:EF:DF:48:28:0C:D9:26:AB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02015581-8c1d-3d21-ae28-ff87e2bca240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:11:99:09:51:71:d1:56:a9:1a:d1:20:97:b2:39:9c:33:8a:
         72:60:30:87:1f:85:0e:3d:5d:cb:16:5a:c9:2c:3f:0d:7d:1e:
         c0:f2:46:fa:b5:6c:a9:06:cc:19:bb:82:ec:d1:e0:60:15:c9:
         0a:d1:73:15:48:38:67:b7:c9:98:70:bf:5e:0b:f1:89:3c:26:
         ee:17:aa:60:db:78:bb:a5:8e:93:86:97:38:87:f5:0f:61:64:
         b3:3e:1b:a8:7d:50:77:00:9f:a2:b5:a4:21:85:0b:70:c5:bf:
         91:ce:01:9d:da:7a:33:5e:0a:77:b8:c7:da:dd:22:95:d0:c4:
         c8:2c:67:22:fc:af:9c:ab:89:0d:8b:b6:48:47:eb:1c:a5:58:
         7a:df:ac:fb:92:1f:33:5d:6d:61:e1:ef:26:9d:ba:e9:13:b6:
         36:51:45:93:36:a1:fb:35:c0:a9:08:7a:11:1b:d6:1d:18:82:
         14:5f:3f:9e:7e:26:a4:e6:62:e9:82:7d:d5:b1:fa:24:55:1d:
         aa:cf:49:77:53:07:f7:24:90:7d:08:f3:e0:7f:47:e6:67:65:
         16:06:5d:02:53:34:f2:90:f7:85:16:46:c0:48:0c:a8:8a:b3:
         2c:ea:dd:45:ac:ef:43:a2:ef:9e:fd:84:0b:1f:45:9c:c4:6c:
         c7:99:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:59:02 2025 by rpki-client