Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e3f116a-57ae-30ff-8d12-3dca7dda2bcd.roa
File:                     4e3f116a-57ae-30ff-8d12-3dca7dda2bcd.roa (raw, json)
Hash identifier:          USYdUK14u9ap1zk0m668HQXZWD0RzZQtpAfyedAirdo=
Subject key identifier:   C6:86:26:FD:5C:6B:E3:3B:CA:6E:A8:F0:7F:8E:41:15:8E:FA:83:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9DA692D478AA1DFBD780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e3f116a-57ae-30ff-8d12-3dca7dda2bcd.roa
Signing time:             Wed 18 Jun 2025 12:38:21 +0000
ROA not before:           Wed 18 Jun 2025 12:38:21 +0000
ROA not after:            Tue 16 Sep 2025 12:38:21 +0000
asID:                     396540
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9d:a6:92:d4:78:aa:1d:fb:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:21 2025 GMT
            Not After : Sep 16 12:38:21 2025 GMT
        Subject: CN=81146fc4-7b43-4ce0-af98-6c1c65a61a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:0f:6a:cf:9f:ed:4a:8e:7c:bd:1a:55:14:
                    02:5b:08:47:04:89:32:6c:15:c8:18:cd:0a:a0:67:
                    d2:45:93:48:07:7b:c5:59:0c:14:7e:6d:f9:67:30:
                    a2:9c:b9:96:9c:57:18:8b:d8:5a:2a:51:0f:d7:90:
                    d2:f5:77:e3:21:36:a5:72:d0:40:f3:30:eb:7e:29:
                    78:7e:7e:8c:14:97:36:d3:6c:ea:c7:03:44:b5:4d:
                    8b:a6:23:e9:a0:c3:7f:5d:f5:e8:cd:df:dd:5b:31:
                    15:a1:ac:ef:86:a6:18:20:65:d1:b3:0c:12:7d:f5:
                    6f:2e:ae:26:71:b9:a3:c5:2f:8f:e3:81:df:cd:47:
                    46:f8:28:5a:c9:9d:36:bf:35:0a:45:14:f7:e4:90:
                    0d:3a:69:37:f5:76:7d:2f:66:39:d8:8e:7c:7a:b1:
                    c6:0a:45:d7:2d:1d:c2:af:18:09:b1:03:c5:5f:32:
                    cd:30:90:48:51:12:bb:f8:05:6a:8b:31:1b:23:5d:
                    9d:73:3f:fd:0d:f5:cf:3f:35:7a:e9:74:ac:a8:a8:
                    06:7d:e2:8e:f6:c2:bc:3b:63:b7:97:68:48:e1:b0:
                    36:f3:5b:1c:ef:e1:97:fa:35:51:1b:68:a1:a8:18:
                    51:21:81:30:e0:e0:82:4a:40:86:be:5b:f2:da:d1:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:26:FD:5C:6B:E3:3B:CA:6E:A8:F0:7F:8E:41:15:8E:FA:83:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e3f116a-57ae-30ff-8d12-3dca7dda2bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:5c:c9:39:c3:bf:31:0a:5e:38:50:73:81:51:6c:01:3b:
         a5:4a:8c:c3:ad:23:49:6e:0f:ba:d2:1b:c1:1f:a5:23:ea:b3:
         6c:ab:d8:e7:a7:8f:3d:87:ed:3e:5b:46:b7:25:fe:7f:69:68:
         cd:e4:25:a0:9f:df:f3:b2:f9:c0:76:e3:18:d6:7a:1c:2a:78:
         4a:2f:15:5a:c6:38:9b:76:1a:97:43:da:ba:42:3e:95:58:f8:
         b8:51:d5:35:cb:26:a2:c9:49:c6:ee:fd:58:05:66:30:87:1b:
         ae:db:f0:5b:99:c8:1a:23:21:f5:21:8a:dd:46:14:86:21:18:
         1d:c3:21:8e:b4:79:6f:50:2a:73:ac:2c:1c:22:fb:61:fd:4f:
         c1:53:1d:a9:77:f3:94:53:b2:16:c1:4e:0c:50:6a:4c:ca:d3:
         23:77:72:2b:d0:2b:70:83:b7:ac:ea:46:5a:02:28:8d:5d:bc:
         83:9f:2d:b8:94:d6:fe:fa:e2:ca:ae:30:33:4c:86:ac:62:7b:
         40:ce:13:30:38:ee:41:1a:62:00:76:ea:d4:c4:d8:fc:a6:42:
         bf:02:b8:71:48:89:54:01:2d:e9:e5:93:1e:12:e4:72:9b:10:
         c9:cf:27:9d:74:13:21:bd:c4:38:31:f7:1e:dc:81:ec:af:19:
         13:ed:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:43:39 2025 by rpki-client