Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e8dc904-4dcd-3300-9074-7f04b95d37e2.roa
File:                     5e8dc904-4dcd-3300-9074-7f04b95d37e2.roa (raw, json)
Hash identifier:          iaTg3VtDArR3ZihBW28ZXQ6SKpbhGRlQb055Bk1gabk=
Subject key identifier:   45:AE:6B:35:B6:22:C6:A6:B2:B9:6D:5B:9B:76:77:90:E9:4D:F3:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9EB261AC6E9E668EFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e8dc904-4dcd-3300-9074-7f04b95d37e2.roa
Signing time:             Wed 18 Jun 2025 12:38:21 +0000
ROA not before:           Wed 18 Jun 2025 12:38:21 +0000
ROA not after:            Tue 16 Sep 2025 12:38:21 +0000
asID:                     36619
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9e:b2:61:ac:6e:9e:66:8e:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:21 2025 GMT
            Not After : Sep 16 12:38:21 2025 GMT
        Subject: CN=15d50e38-d276-4464-ab76-960594d3b3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:90:64:27:0b:8d:58:b6:2f:2b:6f:b5:4b:
                    e1:5a:b4:c4:1c:bf:6e:76:b0:88:9a:b1:5d:34:d8:
                    c5:1f:a5:63:a0:38:1e:6f:be:86:ce:69:1d:23:7c:
                    57:04:6f:6b:ba:8a:09:16:84:2d:8c:a3:87:95:a5:
                    65:9b:d2:e8:51:d5:ee:87:48:d8:da:af:09:f4:2f:
                    6d:93:d4:70:7b:95:0a:cc:b9:3b:62:e4:a6:b6:14:
                    ea:2f:78:9a:dd:ea:1d:96:4b:ad:7f:2e:34:be:36:
                    bb:b6:91:95:94:05:f6:5e:52:50:67:be:51:be:d2:
                    76:a2:f2:69:b0:e4:e1:16:a1:9d:91:81:d0:3a:b0:
                    f2:6d:6c:03:19:e2:04:f2:4c:c9:c5:ac:c6:ef:ac:
                    b8:d4:0e:dc:e3:b6:c3:3e:84:30:e5:ea:89:ff:29:
                    61:13:9b:84:98:0e:8a:da:2a:27:07:ee:00:43:e4:
                    f4:66:78:ae:7c:68:9b:89:06:24:05:b8:30:27:86:
                    99:c4:df:46:d1:d9:85:6b:f5:bd:ab:d9:a0:dd:d4:
                    06:28:21:c2:0f:e5:56:70:94:c5:bd:ac:61:a4:a4:
                    59:ae:7b:97:41:a8:86:ed:8f:43:2e:b8:ec:13:9c:
                    52:36:65:55:e1:75:84:2b:c1:ee:95:aa:3f:95:c9:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AE:6B:35:B6:22:C6:A6:B2:B9:6D:5B:9B:76:77:90:E9:4D:F3:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e8dc904-4dcd-3300-9074-7f04b95d37e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:21:6a:96:49:2c:6d:e0:d5:4d:55:b3:53:bd:3f:44:d0:83:
         2d:57:dd:b8:d6:f1:ac:78:1f:b2:1c:50:8e:b0:53:d3:48:78:
         25:c2:83:46:cf:05:18:db:fc:6c:9d:1a:9e:c1:a1:55:22:18:
         ba:1d:e3:60:34:fe:81:a5:06:be:c8:c5:25:aa:50:3a:0d:30:
         3f:3d:9e:0c:ec:b8:f5:b8:96:6a:3b:7f:5f:9f:c9:10:58:b5:
         f3:72:41:a0:65:09:93:e6:56:6d:2e:3b:f3:09:76:7b:41:da:
         30:c2:0d:2b:d0:51:f3:71:c4:2c:8d:dd:20:ed:a1:27:e8:b4:
         f3:ce:d3:b2:be:b1:9b:3f:c4:9e:7a:91:79:44:1f:f1:67:19:
         6e:bc:f9:d5:65:21:f1:66:b1:4f:a0:c5:d6:41:22:7a:57:7d:
         30:f7:fc:60:d4:8c:89:f4:bc:53:59:d6:21:c3:ef:45:13:c6:
         0e:5d:78:e7:18:fa:d3:b2:42:a1:ad:b0:e1:b6:f3:42:49:00:
         bd:e6:d4:44:df:88:8c:04:90:1c:72:3e:bd:25:ac:33:d9:29:
         58:47:3a:ef:8c:f2:06:dc:0a:5b:0a:b0:ab:69:ff:20:c7:cf:
         fa:c0:58:7d:f6:ff:58:9c:99:d3:2b:3d:3d:95:b5:66:0f:0d:
         52:ba:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:35:55 2025 by rpki-client