Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66eb88a0-e1e6-355d-9717-ebe28fccdd10.roa
File:                     66eb88a0-e1e6-355d-9717-ebe28fccdd10.roa (raw, json)
Hash identifier:          K4IU00weDnxNd0Es+L/HegibdgxF6n9OylgAUMZeu2s=
Subject key identifier:   B1:6A:33:6A:AD:F1:46:B6:ED:F6:1E:1B:F6:2D:CE:E0:2C:F8:8A:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A420DC992B9653DB3A5EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66eb88a0-e1e6-355d-9717-ebe28fccdd10.roa
Signing time:             Tue 17 Jun 2025 12:36:44 +0000
ROA not before:           Tue 17 Jun 2025 12:36:44 +0000
ROA not after:            Mon 15 Sep 2025 12:36:44 +0000
asID:                     396549
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:20:dc:99:2b:96:53:db:3a:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:44 2025 GMT
            Not After : Sep 15 12:36:44 2025 GMT
        Subject: CN=33a714c4-6a4e-4557-85d8-4ec30fad427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6e:91:96:77:cf:27:0e:88:82:00:f4:2e:ef:
                    65:07:74:19:cd:8e:33:ac:cb:0d:24:55:98:ed:3b:
                    7e:24:91:14:b2:77:50:66:15:b8:bb:84:8d:3e:70:
                    7a:8c:a3:a2:76:b6:12:3c:65:cb:53:a4:c5:7f:2e:
                    5e:fa:be:67:8b:8b:89:f4:46:2e:01:e3:41:68:42:
                    f9:4f:b7:b6:67:77:2a:60:7c:64:e5:5f:c3:bd:7e:
                    87:fa:a4:c9:1d:fd:82:a0:32:10:2b:d2:cd:a8:4b:
                    ee:1c:f0:57:30:12:f3:6e:dc:fb:3b:9b:dc:5e:fb:
                    13:47:4a:a4:42:c5:d0:28:5b:be:68:7a:ee:8c:72:
                    73:a1:c2:04:af:7a:57:25:8b:fb:a4:78:29:c7:0d:
                    f8:10:99:dd:41:62:ae:34:dc:89:c8:98:61:0f:6f:
                    98:06:b9:07:e0:9b:81:7e:92:cd:87:40:bb:68:9d:
                    66:bc:c9:6b:31:30:a6:cf:3c:ca:04:da:fb:8f:05:
                    3d:84:24:ba:24:f5:6b:3a:bb:f5:52:d3:22:5b:60:
                    f3:64:9c:0a:8b:8a:4a:b5:c5:9d:f6:24:62:ae:49:
                    e8:0f:5c:d6:08:49:8d:ee:9e:f8:9b:2d:52:0e:72:
                    0e:57:32:c6:af:fc:e5:68:f9:84:53:5e:1b:91:15:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:33:6A:AD:F1:46:B6:ED:F6:1E:1B:F6:2D:CE:E0:2C:F8:8A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66eb88a0-e1e6-355d-9717-ebe28fccdd10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:79:f0:7c:67:0a:d5:67:43:49:21:33:bb:58:1f:44:48:
         87:f0:3f:7b:44:e4:d0:26:94:76:e3:2f:b4:bf:24:5c:57:a3:
         18:ae:e4:df:ec:73:3d:e7:ed:b9:e6:37:92:52:2a:28:cd:53:
         6f:2b:3e:2b:0a:ad:e2:11:44:b9:46:cc:37:27:e2:5f:fa:7f:
         85:c4:26:21:e6:99:bf:03:eb:6e:ce:29:a9:96:38:32:d6:76:
         8d:8c:20:58:0b:59:61:31:e8:18:5f:26:59:55:e1:1f:b6:c2:
         3b:4f:33:e1:4c:01:aa:de:42:3b:44:4f:2f:c6:dd:9d:a6:8d:
         2c:6e:83:a1:7d:07:33:04:27:51:a1:43:25:3b:8c:68:d9:8b:
         ae:e8:06:1d:e2:cb:7f:6a:e4:d2:25:d7:88:07:23:81:d5:51:
         eb:81:dc:2a:f3:11:21:8d:bb:a8:ba:a2:f1:5a:13:53:0d:2a:
         1b:81:91:5d:03:b0:d7:e0:4f:0d:33:9e:7d:39:2e:5b:a5:52:
         a3:eb:6c:da:57:80:2d:3e:c9:79:f3:69:8c:b2:7e:99:db:53:
         8f:f0:9e:e4:2f:a6:cb:70:a6:27:fe:74:35:d5:d8:83:c0:ac:
         c6:6e:c9:42:8d:63:5b:13:e5:55:8f:67:ce:0f:8a:30:82:4c:
         48:03:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:15 2025 by rpki-client