Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa
File:                     3282c4d4-cd82-30c9-9295-f17089c0d06e.roa (raw, json)
Hash identifier:          TqA8X2GdM9ebIi8YFqWTPauejAFG0wT5bG5TWoExNGw=
Subject key identifier:   E7:94:E9:AD:1E:5F:B8:13:2A:27:D8:07:17:AD:1C:6C:51:31:3A:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9D9282CB2E6089E1AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa
Signing time:             Wed 18 Jun 2025 12:38:21 +0000
ROA not before:           Wed 18 Jun 2025 12:38:21 +0000
ROA not after:            Tue 16 Sep 2025 12:38:21 +0000
asID:                     396543
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9d:92:82:cb:2e:60:89:e1:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:21 2025 GMT
            Not After : Sep 16 12:38:21 2025 GMT
        Subject: CN=c884bfc3-0ba0-41e5-a798-1647f16072b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:00:a6:2f:65:62:da:86:01:f3:99:c1:c8:9b:
                    4b:3b:d4:5c:68:ba:d0:64:93:84:1a:48:44:ad:8f:
                    4b:b2:8a:73:69:e7:92:e6:91:da:f1:0d:2f:87:2f:
                    6c:3c:f1:ca:6a:53:d5:e5:12:00:86:24:41:1e:ab:
                    b3:bb:1a:a5:ed:a8:7f:14:4d:6e:0b:7b:e0:45:b5:
                    ee:9a:13:49:3e:dc:73:d9:f4:18:46:e8:c0:49:ea:
                    f9:9f:00:af:2c:35:20:e4:e3:c8:72:39:82:f9:97:
                    ba:9b:fb:b9:fe:cd:83:3d:71:cf:f3:de:da:6d:ea:
                    c1:cd:f8:7d:96:94:4b:e6:e2:5a:ff:5a:be:49:af:
                    b1:e6:fc:b5:20:63:28:c0:19:cd:32:03:3f:9c:8e:
                    12:ed:47:08:eb:8b:12:10:6f:f6:a0:cb:e8:42:58:
                    9a:9c:09:38:9e:11:8c:84:f8:b8:0e:23:57:0c:10:
                    9d:0e:33:6d:45:07:e0:f3:00:2b:0b:79:49:bf:2b:
                    c7:20:62:cb:89:7a:b6:f0:f1:af:73:31:c2:22:da:
                    4e:a9:63:71:90:f7:52:a3:a9:aa:ee:c2:cc:a5:b1:
                    cb:4d:3e:9c:df:93:87:b1:73:40:29:7c:38:8c:69:
                    e4:2c:3e:c2:41:c3:20:dd:a7:cd:31:1f:5a:13:f3:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:E9:AD:1E:5F:B8:13:2A:27:D8:07:17:AD:1C:6C:51:31:3A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:55:98:6e:72:9e:93:a6:d0:d8:fb:93:d3:e1:7a:61:91:
         96:01:9c:ee:59:0c:16:22:6a:59:56:06:87:e0:ce:a2:65:db:
         bf:1d:39:e5:a0:4e:25:bb:e2:8f:32:8d:16:15:4e:8e:38:3e:
         e5:3b:02:9f:0d:91:1a:49:05:23:3d:71:00:b5:3d:d4:6a:3f:
         8c:a5:64:4c:76:70:a3:19:d8:c6:88:37:9b:34:b6:1f:a5:87:
         c3:98:46:02:cb:00:47:14:b8:0f:c0:1f:43:ee:ff:91:52:c5:
         be:c0:cb:80:51:e4:63:e9:fd:4f:af:22:25:ab:90:6f:36:60:
         e1:e7:13:79:0a:ed:c4:e9:69:af:ab:4c:08:34:8d:8e:85:cd:
         61:7f:fe:9e:db:8a:4c:0b:dc:9e:8e:77:66:94:78:01:c0:cf:
         24:91:da:8f:6c:29:f0:ea:e5:5e:68:12:ce:57:9c:08:1f:9b:
         27:af:dc:bd:8d:76:3a:f4:10:cc:13:80:12:c2:6e:84:e3:96:
         35:03:29:89:80:86:ed:6c:0c:38:bb:d5:b8:53:28:68:c8:8b:
         45:de:d9:5c:7e:e7:ed:93:3e:0a:da:7c:c3:5c:f4:ea:c7:87:
         70:d4:bf:a7:09:25:a5:36:be:c9:fd:a3:87:53:66:d1:7a:8c:
         70:fd:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:15:11 2025 by rpki-client