Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8879cc-c631-3ef7-9d27-e867702c6f35.roa
File:                     1b8879cc-c631-3ef7-9d27-e867702c6f35.roa (raw, json)
Hash identifier:          NJgBA5ojAjg2Ua26I03Pr4pmDYOc6qP9hca2S6i5flc=
Subject key identifier:   C3:38:DC:CD:E7:A1:EA:7C:12:1A:4B:21:D7:6C:39:64:B5:5A:BC:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB166CA88BD7BCFABCFDB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8879cc-c631-3ef7-9d27-e867702c6f35.roa
Signing time:             Thu 12 Jun 2025 12:42:09 +0000
ROA not before:           Thu 12 Jun 2025 12:42:09 +0000
ROA not after:            Wed 10 Sep 2025 12:42:09 +0000
asID:                     396827
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:66:ca:88:bd:7b:cf:ab:cf:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:09 2025 GMT
            Not After : Sep 10 12:42:09 2025 GMT
        Subject: CN=731addbe-8623-4c5f-a79c-65f9870ba833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:d0:b8:03:b1:75:bf:b3:15:26:61:a4:12:
                    c9:d9:bb:82:8d:48:33:1f:ac:57:c8:9e:ae:a7:04:
                    e7:83:4e:c9:59:8b:cb:17:16:be:77:7d:ca:a2:22:
                    90:42:55:9c:0e:88:d3:1d:af:d9:6d:54:f9:31:ed:
                    7d:90:cb:6a:7f:f9:34:a2:16:bb:97:f1:58:90:e4:
                    a8:97:77:ac:97:fe:b9:d5:a9:a5:13:ec:44:1a:ed:
                    56:fe:e5:d1:a1:ac:b1:eb:52:87:dc:b0:3c:e8:a1:
                    da:96:21:7f:2d:15:04:cc:c5:00:89:3e:7b:d5:09:
                    99:98:38:cc:75:da:d8:aa:d2:81:3c:f2:2d:c2:85:
                    a2:87:ee:87:13:d2:d8:db:c6:7b:7e:46:c7:62:87:
                    84:98:92:de:11:b0:5c:37:bc:d6:21:5e:79:b0:80:
                    dc:d9:da:e7:44:15:fa:f7:79:8e:2e:86:41:d2:c4:
                    d3:33:5b:54:07:b1:57:34:03:4e:e9:61:6f:6d:c7:
                    95:5a:66:9a:fa:17:69:14:88:28:c7:d5:ee:0d:8d:
                    e4:b6:2b:d3:75:c1:59:f0:c1:94:f4:a2:cd:d4:3d:
                    0f:e9:ca:da:af:ea:2b:c3:11:09:8c:d3:12:d9:fb:
                    30:59:bb:40:c0:60:d5:b9:d9:37:bc:05:74:d1:e9:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:DC:CD:E7:A1:EA:7C:12:1A:4B:21:D7:6C:39:64:B5:5A:BC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8879cc-c631-3ef7-9d27-e867702c6f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:56:c6:b1:11:04:43:39:22:15:14:0c:a0:ec:56:f0:61:af:
         86:47:39:fe:3c:82:a4:b5:c9:42:90:8e:67:d5:a1:2d:23:aa:
         32:c9:ce:fe:2b:8b:e5:66:3d:91:4d:cd:6b:1a:f2:1c:37:89:
         46:ad:30:53:6e:19:c6:d6:12:f9:b6:47:1b:77:e5:67:a0:33:
         15:f3:27:8e:68:53:d6:45:99:a2:a7:43:e9:f1:e2:9b:f7:01:
         7b:f0:44:50:f7:72:d6:aa:03:f4:be:3a:aa:6f:db:a3:02:24:
         3c:5f:92:49:99:4d:46:8e:25:2b:47:09:76:85:5f:ab:09:4a:
         cd:3a:57:0e:b3:16:4a:a8:05:72:1c:c1:10:7a:53:d9:b7:e0:
         a1:c3:80:f9:b8:75:55:0a:b5:2f:ce:31:da:bf:27:35:cc:c1:
         57:72:44:3b:25:9a:c5:af:42:e1:b4:21:54:dc:48:ad:08:4e:
         e5:c2:1b:b5:2f:77:c2:4a:ba:4a:a1:fd:42:12:a1:c4:8f:22:
         bd:5f:c7:94:b3:fe:67:55:fe:cd:bd:d5:c6:cc:3d:98:c8:c4:
         ad:b7:4e:84:37:97:1e:0c:f3:ed:b6:bc:a3:02:ab:da:e1:63:
         e7:13:9d:29:83:44:ab:f3:4d:d9:b6:76:02:b9:4c:ac:c9:c5:
         8c:d3:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:02:11 2025 by rpki-client