Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3ac3c3-37c1-3350-8e9f-d74fdb713d42.roa
File:                     1f3ac3c3-37c1-3350-8e9f-d74fdb713d42.roa (raw, json)
Hash identifier:          /r+2NPjK05PUWxNRBO7gBomH/VKEf1vxN/2UretNTi4=
Subject key identifier:   1D:53:99:9E:92:D8:AD:77:A8:D9:A0:70:6B:C0:9C:E2:28:25:F9:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41DE15A00E7738160F580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3ac3c3-37c1-3350-8e9f-d74fdb713d42.roa
Signing time:             Tue 17 Jun 2025 12:36:42 +0000
ROA not before:           Tue 17 Jun 2025 12:36:42 +0000
ROA not after:            Mon 15 Sep 2025 12:36:42 +0000
asID:                     36623
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1d:e1:5a:00:e7:73:81:60:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:42 2025 GMT
            Not After : Sep 15 12:36:42 2025 GMT
        Subject: CN=b0ec7e1e-ca11-48ad-8955-41d9054d49e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:f3:e6:62:0a:33:b5:e0:52:56:04:b8:b7:
                    de:e0:15:ba:7f:73:62:f8:bb:2b:5d:69:7d:81:d6:
                    87:89:76:38:a6:16:e7:7b:3a:d7:31:a4:f8:06:40:
                    4c:a1:85:67:6f:55:64:19:c0:75:e9:f3:d3:8b:c7:
                    0e:1f:95:a4:79:f4:92:a0:da:d8:aa:fe:a6:60:c1:
                    09:11:f7:94:65:60:92:37:29:fb:4f:68:21:0d:0a:
                    9a:15:f9:07:0f:0e:d5:4b:f6:d6:32:cd:c7:44:52:
                    22:79:6e:2f:a4:b8:35:f7:04:57:8e:21:2a:ab:06:
                    26:5e:b9:af:d5:28:4c:ff:00:7e:72:af:10:28:f0:
                    52:99:63:24:0c:c3:ad:6b:38:47:2a:d1:7d:b0:61:
                    0d:d1:4f:4b:fd:fd:01:cb:e3:d8:75:20:4b:16:ea:
                    74:4a:9b:ad:f2:41:70:6b:0d:af:88:c9:18:03:42:
                    0f:4a:0b:28:d0:50:3d:23:e6:24:ba:d5:c5:37:e0:
                    23:cf:29:65:74:76:b8:70:17:a9:50:dd:3a:63:e8:
                    dd:6f:64:b0:b6:67:8d:28:f3:8c:31:75:a7:84:06:
                    0e:80:19:2b:9e:2b:cb:1c:ce:41:08:08:20:8c:53:
                    b0:b6:cc:b2:c2:4a:bf:43:6e:2b:0d:46:53:69:86:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:99:9E:92:D8:AD:77:A8:D9:A0:70:6B:C0:9C:E2:28:25:F9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f3ac3c3-37c1-3350-8e9f-d74fdb713d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:91:5c:cf:4c:8a:75:18:2c:01:4c:7a:fc:83:17:70:20:
         52:0a:3a:2d:39:f0:74:6f:f5:35:19:f2:09:ea:a4:ad:b4:39:
         12:00:3e:dc:b7:00:6b:18:1f:4d:ec:bd:e2:aa:4a:44:3a:56:
         bf:72:c7:31:d6:79:38:88:67:53:02:6c:1e:bc:39:8a:30:df:
         01:01:ad:22:92:9d:0e:10:c6:65:6b:be:37:73:88:b6:b6:74:
         4a:eb:29:15:1e:7a:f8:45:e9:c7:12:1c:b4:e7:68:cd:48:70:
         e6:49:38:1d:7d:49:27:68:ff:bb:db:67:78:9d:65:b6:d8:d3:
         d7:21:cd:e3:13:37:90:ec:6d:3a:56:49:57:8b:e6:2e:d1:52:
         2f:13:e6:3b:b7:79:f8:f6:aa:62:27:5e:83:bd:1e:63:de:48:
         cd:4e:73:5f:4f:79:96:99:21:c6:35:5a:bd:29:f0:e1:ed:f4:
         71:c2:39:0d:08:81:5f:d2:3d:5a:33:43:4f:6f:f6:0e:ca:20:
         24:80:0a:f3:91:33:f8:d7:0f:28:c7:b0:26:ad:ec:13:75:02:
         fa:a7:2d:34:e1:45:53:f0:88:55:51:f0:52:36:b7:14:15:a7:
         00:c6:1e:9d:e3:31:8b:98:78:e5:30:f4:37:34:82:a8:c7:b7:
         93:e6:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:26:11 2025 by rpki-client