Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69efdf7c-2edc-3fa7-8e78-4c86adc32b94.roa
File:                     69efdf7c-2edc-3fa7-8e78-4c86adc32b94.roa (raw, json)
Hash identifier:          4lvX4u5xWSec6D4jf6nhofj4zQOoRiIJnoQfYf/tUgo=
Subject key identifier:   62:2B:61:4A:C2:B9:AD:70:0F:F8:B7:EA:BD:ED:EA:31:07:74:9A:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16B7BCE560B7ED04F6200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69efdf7c-2edc-3fa7-8e78-4c86adc32b94.roa
Signing time:             Thu 12 Jun 2025 12:42:12 +0000
ROA not before:           Thu 12 Jun 2025 12:42:12 +0000
ROA not after:            Wed 10 Sep 2025 12:42:12 +0000
asID:                     396615
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:6b:7b:ce:56:0b:7e:d0:4f:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:12 2025 GMT
            Not After : Sep 10 12:42:12 2025 GMT
        Subject: CN=404f7737-4bb2-4a1b-b5a2-ea797d0c6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:92:92:65:0d:b6:cb:4c:bf:41:75:07:22:
                    27:72:c7:ef:26:ae:f9:ad:3d:69:f2:20:5e:40:27:
                    f0:c9:da:83:d7:16:00:f0:00:d8:49:00:fd:d3:d0:
                    36:da:e9:19:0f:ce:e3:5b:5e:3e:76:b4:a1:7c:96:
                    65:66:33:1d:10:d9:7d:78:0d:4a:ce:95:33:5e:cd:
                    9e:11:71:d1:c8:3e:c3:17:7b:bd:87:e0:4d:b4:a6:
                    92:7f:0c:e9:08:10:e1:78:cb:2f:18:14:52:7d:0f:
                    5f:b1:71:e8:a4:42:32:84:74:44:e9:94:9f:7b:98:
                    79:1f:0e:12:2c:58:7c:81:08:dd:64:6c:da:8c:70:
                    0b:2e:e8:ca:33:33:8d:80:da:85:d8:97:27:c5:82:
                    bf:c5:74:8a:f2:8a:7d:94:e9:6a:c4:b8:0a:8b:1e:
                    f2:23:77:f1:be:ad:c7:09:64:6c:af:f0:0a:97:33:
                    8c:6b:9a:69:ad:41:38:0f:bc:e0:80:34:07:37:81:
                    8d:2a:f3:d6:2b:9c:67:65:e2:6c:cf:b9:30:57:67:
                    84:8b:99:ba:ce:79:5f:82:c8:36:1a:b8:42:18:1e:
                    64:61:23:b5:6c:28:47:c5:fb:46:02:ce:1d:7f:40:
                    a4:18:65:68:bd:21:86:cb:82:e6:44:55:94:2a:b0:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2B:61:4A:C2:B9:AD:70:0F:F8:B7:EA:BD:ED:EA:31:07:74:9A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69efdf7c-2edc-3fa7-8e78-4c86adc32b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:6d:3a:dc:70:fd:b3:e1:56:e6:f5:10:f9:8f:b9:9f:c0:
         e7:c4:e3:d9:02:2e:91:0a:c1:ef:3c:8c:63:b2:2d:5c:24:e4:
         a8:0a:07:8b:4e:69:51:60:3c:60:3d:dc:43:f3:57:c9:e4:c0:
         fb:df:1d:0b:78:5f:25:a0:f3:a7:cc:46:ef:04:eb:18:58:1b:
         e6:b0:a8:bb:f8:41:34:43:49:42:b8:81:45:5d:bc:7c:fb:ed:
         9a:0c:dc:23:c8:77:38:65:dd:08:1a:ae:51:96:50:9b:89:a9:
         a4:70:d4:ec:a7:99:c6:76:37:7a:05:2b:ae:c6:e4:a5:d8:67:
         ba:1b:a6:7f:ff:62:98:44:d4:8c:5f:de:75:5a:3f:c3:d4:bb:
         5b:14:de:a3:a8:e9:cf:15:f7:0a:c5:2a:ad:98:ac:5f:b0:08:
         87:fd:aa:a4:a6:d5:24:d0:64:18:17:7f:2d:c2:7f:cc:16:e3:
         39:1a:b3:b2:12:bf:90:8a:1f:ce:42:90:de:52:71:89:2e:ae:
         01:23:ab:83:4f:8d:14:40:4f:bc:7d:a1:98:55:e3:8b:51:71:
         1b:85:58:e0:52:1b:f7:88:01:e3:f6:42:fd:c9:15:f0:54:7e:
         ee:ba:4a:c8:cd:2e:d4:cf:f1:a5:49:76:7a:e9:15:a0:d3:8c:
         ba:7c:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:18:01 2025 by rpki-client