Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59adfa2c-10d9-37ad-b741-e110f71519da.roa
File:                     59adfa2c-10d9-37ad-b741-e110f71519da.roa (raw, json)
Hash identifier:          mkPSw+Fvf/87q9bxSwu1SQ48MBRimKKx0Se7mcIb+G0=
Subject key identifier:   16:67:82:69:D4:8A:AE:44:C1:5C:DD:A5:96:8D:7F:29:D3:13:ED:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668F5C8176A1B943928E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59adfa2c-10d9-37ad-b741-e110f71519da.roa
Signing time:             Tue 06 May 2025 12:43:06 +0000
ROA not before:           Tue 06 May 2025 12:43:06 +0000
ROA not after:            Mon 04 Aug 2025 12:43:06 +0000
asID:                     396582
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8f:5c:81:76:a1:b9:43:92:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:06 2025 GMT
            Not After : Aug  4 12:43:06 2025 GMT
        Subject: CN=ea81423b-e79d-4608-bb98-b3ef58bc2770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:44:07:6b:e6:4a:86:0b:04:05:03:58:01:
                    da:39:09:f2:10:e7:b8:51:a4:42:44:84:c3:88:77:
                    f7:a0:b6:57:60:4e:e9:5f:62:04:72:a4:9d:20:fb:
                    4b:b8:91:33:98:92:bf:e9:5d:3b:10:06:f9:20:a0:
                    e1:0a:38:b1:5b:64:80:9e:34:30:46:06:f7:9e:17:
                    b2:98:fd:58:39:73:26:9d:24:df:99:45:da:05:a7:
                    6d:23:53:2b:aa:09:87:8c:14:fc:c9:f4:27:d9:55:
                    72:9a:5c:1d:a0:a4:b4:ac:bc:3a:ef:06:ab:54:0f:
                    b1:f3:d9:64:e3:92:2d:a2:a9:8b:32:f4:95:44:eb:
                    ce:bf:66:95:d4:8d:20:eb:65:37:68:4b:88:c6:ec:
                    49:f6:26:f1:7c:de:62:70:03:3e:9d:d7:45:ec:8a:
                    dc:22:ba:cd:dd:51:61:d2:98:e7:fe:60:8a:85:63:
                    29:74:dd:19:e5:ea:f0:1c:50:e8:a5:a6:fe:0f:11:
                    24:de:9a:fc:bb:76:24:d9:5f:74:0b:18:f8:4d:c4:
                    8e:f4:32:e3:d3:2a:b9:4a:2b:d8:f6:72:39:e8:d8:
                    fb:f1:09:cd:bc:15:35:2c:c1:0d:f7:ef:bd:e8:78:
                    7c:42:c6:a1:4f:47:1e:ee:5f:16:90:b4:bc:71:22:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:82:69:D4:8A:AE:44:C1:5C:DD:A5:96:8D:7F:29:D3:13:ED:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59adfa2c-10d9-37ad-b741-e110f71519da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:b2:d2:a3:23:20:11:dd:e6:cd:67:6a:1a:1a:bf:36:7d:
         14:9b:96:cf:51:93:80:37:7f:08:45:77:c3:8b:52:58:65:7c:
         15:12:9a:f1:c1:46:67:c5:62:b9:93:eb:f6:bd:46:df:a3:1a:
         9d:86:78:24:57:1a:9f:67:e2:d4:26:34:88:b5:9d:74:7b:98:
         5c:3a:1f:f0:95:aa:4f:22:46:d2:aa:ff:34:8d:49:0b:d2:53:
         e4:c7:1f:ed:98:8e:5c:d3:24:8d:3f:07:61:d8:b4:38:ce:05:
         a5:1d:57:31:16:ee:d5:88:2d:d3:8e:06:51:dc:1a:7d:d7:76:
         b9:f9:ac:1b:ed:c7:06:2a:02:38:b2:10:32:9e:d1:3e:21:7d:
         4f:ad:d0:74:ce:4f:ce:98:d0:10:ad:60:5b:3f:1b:4d:63:82:
         b8:91:8c:3b:0f:5b:61:56:96:4e:17:95:11:cf:6d:5d:fa:08:
         1b:29:ad:dd:8c:60:cb:34:7c:51:be:39:ed:15:4b:ce:5f:78:
         81:5c:ce:7c:19:7f:64:b0:b5:75:cb:9a:a4:03:cb:43:91:a4:
         5b:64:58:d8:57:37:36:bc:bb:b6:53:aa:35:0c:47:56:11:ff:
         07:26:27:2e:d3:1a:ea:03:b8:78:73:2d:7c:4b:d8:87:c4:01:
         ca:1c:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:53:03 2025 by rpki-client