Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/286bd5c5-bc0d-3f72-8083-d8e8784dc463.roa
File:                     286bd5c5-bc0d-3f72-8083-d8e8784dc463.roa (raw, json)
Hash identifier:          F+Fco+Q6P9VJVZMiNTOqcOIzsUe5eSFW4nvQaT6N914=
Subject key identifier:   2E:01:3E:11:FD:29:68:D4:60:59:52:61:AD:A8:AA:2D:06:75:1C:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668D3987C8D26315FEC9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/286bd5c5-bc0d-3f72-8083-d8e8784dc463.roa
Signing time:             Tue 06 May 2025 12:43:05 +0000
ROA not before:           Tue 06 May 2025 12:43:05 +0000
ROA not after:            Mon 04 Aug 2025 12:43:05 +0000
asID:                     396827
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8d:39:87:c8:d2:63:15:fe:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:05 2025 GMT
            Not After : Aug  4 12:43:05 2025 GMT
        Subject: CN=0bf42df5-5b1b-4535-9945-a4c215f09ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:ab:94:c4:7b:ee:7a:1a:ed:f0:f6:e2:9e:
                    b8:03:0e:0c:37:da:3b:a7:0a:cd:f1:99:11:58:43:
                    fc:5d:0a:b4:fc:ff:ed:1e:44:46:56:30:58:80:26:
                    11:9a:2f:c5:88:26:95:cc:41:00:86:49:6f:78:8f:
                    82:f4:1e:ba:5a:8f:05:27:d1:d5:87:1f:cd:b8:34:
                    3b:1c:f9:cb:f5:cd:97:47:e7:30:8c:42:02:14:39:
                    77:3b:82:32:83:5c:0f:0e:70:9f:a9:9c:c3:a1:ab:
                    bd:bc:0e:06:5b:2f:27:cb:19:75:2c:bc:4a:1d:0b:
                    da:f6:30:3d:16:07:68:2b:57:60:9b:4c:eb:90:bb:
                    0f:64:e5:c3:0a:1d:aa:d1:9d:55:f5:d9:80:4b:50:
                    c9:d2:58:21:be:57:54:c3:7e:8c:97:54:15:28:dc:
                    00:e5:71:00:e7:61:07:06:9a:88:c7:af:6b:93:63:
                    be:75:45:17:a8:72:92:6c:a2:78:42:58:b5:dd:b5:
                    70:70:37:32:dc:ab:22:d6:03:63:2e:ba:7d:a5:8d:
                    13:51:f2:5f:8a:47:b4:85:8c:16:e4:65:c0:4e:5c:
                    9d:39:15:bc:a0:5c:cc:13:a6:35:5f:b2:30:19:82:
                    8a:97:15:3d:38:ad:95:cc:53:a7:c7:a7:1d:d5:a3:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:3E:11:FD:29:68:D4:60:59:52:61:AD:A8:AA:2D:06:75:1C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/286bd5c5-bc0d-3f72-8083-d8e8784dc463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:39:34:a9:29:cf:21:fb:61:62:94:f5:9b:40:5d:f9:cc:73:
         7c:bb:8f:9f:73:df:8b:54:9c:ee:2c:39:36:55:44:0c:b1:c6:
         88:b4:51:17:d9:89:4e:68:f4:57:38:66:a1:2a:9a:a7:fd:23:
         f5:7a:58:9e:03:b9:81:fc:99:44:b7:c6:e0:58:7f:12:ae:2d:
         81:60:57:57:c9:2f:8b:a2:72:88:f1:6d:1a:00:f9:9d:23:28:
         7d:1a:ac:00:bc:2e:de:9e:23:bc:ab:20:5a:7d:c0:24:73:6f:
         1f:6e:56:95:00:86:3b:ff:7f:a4:0d:da:fd:26:0b:25:9d:3d:
         26:1a:3a:5f:6a:40:4c:ee:80:67:1d:cf:96:32:e6:05:77:cb:
         cf:0d:5e:41:f3:2e:aa:42:7b:34:27:1c:a4:2e:c8:99:8e:d2:
         d9:20:d3:e7:ea:b9:0b:04:86:34:22:d9:93:a2:d9:6c:21:c2:
         9f:83:7f:1d:eb:25:be:e3:09:83:51:86:92:f4:15:0c:a5:08:
         e3:96:c3:17:37:cb:79:60:7f:b7:ab:1b:59:90:a2:0b:b1:63:
         da:38:92:66:3d:5e:42:23:d5:c1:16:0d:19:d2:d5:06:b0:9a:
         b0:18:4e:20:5f:f1:ad:0e:2a:40:b2:c7:57:1a:88:61:6f:5f:
         f9:52:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:15:17 2025 by rpki-client