Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65df64e7-69d9-3530-893e-9d87ba1fec1b.roa
File:                     65df64e7-69d9-3530-893e-9d87ba1fec1b.roa (raw, json)
Hash identifier:          3sjIFfa21JzgmSe/ZUtwRnJ4cXTW198BOc5nYsgA7p0=
Subject key identifier:   EB:AA:3F:3E:6D:32:40:13:7F:76:5D:14:26:3D:2B:0F:DD:92:DC:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41B4B6CADF3D6CCF74700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65df64e7-69d9-3530-893e-9d87ba1fec1b.roa
Signing time:             Tue 17 Jun 2025 12:36:41 +0000
ROA not before:           Tue 17 Jun 2025 12:36:41 +0000
ROA not after:            Mon 15 Sep 2025 12:36:41 +0000
asID:                     397201
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1b:4b:6c:ad:f3:d6:cc:f7:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:41 2025 GMT
            Not After : Sep 15 12:36:41 2025 GMT
        Subject: CN=049e84ae-79bf-4191-bec9-692f07601861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:01:7f:8b:34:16:fc:11:15:4e:3e:59:e2:
                    5e:92:1e:02:b2:7a:f6:d5:f2:84:5c:9c:52:81:3d:
                    d6:88:08:71:08:3d:8f:37:ec:93:96:3a:7f:28:61:
                    ad:4d:6b:e9:52:92:db:e4:71:64:cf:df:97:5e:cf:
                    8c:8c:79:de:62:2c:ec:57:0d:93:48:5b:2f:fd:2c:
                    ad:55:d6:10:0a:cb:7d:2f:2b:96:b6:28:35:86:2f:
                    a1:fb:8e:6f:23:1d:4b:56:94:94:d1:dd:4b:dc:f6:
                    fc:de:88:7d:68:51:61:7a:0f:f1:ec:fb:94:07:f9:
                    cd:08:f7:ba:70:ce:1f:b8:e5:57:41:32:f9:1d:e8:
                    fe:d4:0c:de:4e:8b:d4:bd:24:3e:37:6b:95:d3:92:
                    1d:dc:87:82:6a:ef:70:0f:04:c6:bc:7d:f3:6c:99:
                    67:45:dc:ff:fb:b2:9c:12:1c:f8:85:ac:f5:9b:b4:
                    d4:91:ae:e6:49:89:9a:66:70:0a:41:1f:4a:cd:9b:
                    90:ed:e6:53:9a:84:ce:d8:04:4f:d5:7f:72:02:ad:
                    45:2c:78:73:65:f8:ae:6f:e8:10:21:d5:86:4c:3a:
                    e8:22:45:4f:17:7f:23:63:57:16:ea:9f:68:74:83:
                    cd:b4:bb:89:4b:ed:e2:72:e9:25:ad:83:e0:5f:d6:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:3F:3E:6D:32:40:13:7F:76:5D:14:26:3D:2B:0F:DD:92:DC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65df64e7-69d9-3530-893e-9d87ba1fec1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:15:b5:6a:2a:a3:03:98:0c:34:ff:39:a3:5f:01:54:03:f1:
         89:c5:6e:d5:4f:d7:bb:bb:da:d4:c4:ee:68:46:db:86:3e:f4:
         25:29:91:e4:8d:97:26:b6:dd:29:39:70:5d:aa:14:8f:1e:53:
         83:0a:1a:77:e3:c5:f6:25:91:75:72:5b:71:15:25:83:0c:2e:
         b8:b2:25:bc:73:50:74:fb:5e:8b:62:40:a5:5b:02:9c:78:72:
         75:d8:6e:40:d0:88:2e:c5:ee:ff:f2:95:6b:c2:05:8c:02:00:
         7d:53:8f:13:16:04:cc:53:c1:a0:9e:01:5a:7e:fd:6d:b4:db:
         e2:f5:fb:08:07:ec:4a:b2:3e:79:49:70:58:4e:ad:d7:6a:7a:
         28:7d:73:fc:cf:c6:07:35:0a:19:73:50:5d:fb:38:bd:18:44:
         91:6d:8f:02:67:df:bb:e5:34:bd:8e:1c:7c:82:81:71:de:5d:
         3d:25:f4:a4:d6:48:43:b2:96:d3:89:f7:1f:72:59:a4:e7:d2:
         95:1c:37:f4:c2:25:c4:01:9f:a8:05:a7:92:96:38:bd:13:a3:
         b6:e0:df:5a:1b:3e:f8:60:de:d4:09:a7:52:aa:63:7b:21:a9:
         ae:3d:89:88:ba:95:29:5c:ab:1a:fc:98:90:4d:7a:11:fe:d0:
         2b:02:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:12:15 2025 by rpki-client