Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa
File:                     80aa0ba1-f185-3261-8724-dffe10a9803c.roa (raw, json)
Hash identifier:          z2upi2HmgJnflnc8HPZT4AEC4p4z1ahPotQ3BCQ6mxo=
Subject key identifier:   A4:2C:36:60:34:8D:41:2E:E1:62:69:3D:31:AA:21:27:5B:1B:7F:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DB0BFE12048AE83107A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa
Signing time:             Thu 15 May 2025 12:24:55 +0000
ROA not before:           Thu 15 May 2025 12:24:55 +0000
ROA not after:            Wed 13 Aug 2025 12:24:55 +0000
asID:                     396550
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:b0:bf:e1:20:48:ae:83:10:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:55 2025 GMT
            Not After : Aug 13 12:24:55 2025 GMT
        Subject: CN=59a8a276-6236-4544-adb5-a289fc540b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:6e:7f:4c:03:de:ee:79:5f:15:34:28:b3:
                    a6:c1:37:31:59:ec:c2:6f:f3:0d:bb:ff:d8:e7:35:
                    c2:0c:4c:87:1f:75:f1:36:1b:97:6c:5f:02:ab:54:
                    c3:5c:f5:86:23:85:b6:83:90:78:5b:1b:ee:71:04:
                    07:33:58:cf:64:fc:41:17:a6:69:b4:75:2e:e2:da:
                    a2:18:6a:49:bc:6a:66:34:a3:39:fb:c1:58:5a:4f:
                    a8:3b:a4:e4:75:f2:e8:06:99:75:38:b3:fe:e5:78:
                    76:22:32:54:3b:ef:61:44:58:4f:a4:02:da:0a:24:
                    28:f2:eb:bb:41:0a:86:2d:c4:18:60:ff:a6:0b:56:
                    57:d9:ce:5d:0f:d6:84:94:b6:ce:1d:d8:0c:05:93:
                    d5:be:9f:6e:1d:02:81:e3:28:19:a3:a2:b8:98:54:
                    c8:5e:fb:db:d2:56:1f:09:c2:fb:a1:36:69:91:47:
                    12:ac:2a:40:26:03:12:66:79:15:33:86:8a:d1:ce:
                    97:41:ad:6b:37:08:b1:86:a1:01:94:2c:5f:36:48:
                    1a:4b:9e:c0:e7:d8:5e:93:ba:19:19:69:17:39:e4:
                    06:9c:8c:3f:29:f3:a6:57:86:a4:03:2f:7a:9e:ea:
                    6b:82:32:28:e9:92:b8:f7:c3:38:65:5a:ad:af:dd:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:36:60:34:8D:41:2E:E1:62:69:3D:31:AA:21:27:5B:1B:7F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:da:c6:cc:71:cb:6f:5a:e9:cf:3c:95:76:c4:80:1f:ea:
         8b:22:30:bd:8a:98:19:b4:92:b8:d3:2f:b1:30:df:d0:78:04:
         df:61:81:68:6a:fe:40:a7:54:0f:cc:6c:b6:0a:2e:f9:3d:f8:
         67:3b:5c:ad:da:be:0f:29:50:b9:45:c2:a2:97:2b:44:67:82:
         48:b2:85:9a:69:01:be:55:85:b4:bd:aa:e9:fd:02:80:da:3f:
         90:83:f3:b8:67:e8:6b:a7:80:3f:c8:11:b9:34:a6:93:d7:f9:
         35:ac:e5:f1:87:83:b8:19:7b:af:93:e8:15:18:7d:3b:3f:96:
         98:c1:b0:5e:5c:9f:07:4a:5f:11:d7:3c:6f:28:26:df:09:c0:
         b7:a9:3d:b5:5f:58:6a:b3:6c:ab:23:0d:0a:3b:ad:06:32:23:
         79:19:a2:b0:70:24:ed:4a:6c:9c:6f:95:01:9a:f1:7e:43:d3:
         05:ae:6a:e0:21:9c:79:32:e1:74:e0:c8:2a:c8:20:d1:72:b1:
         32:df:47:c7:28:be:d6:cf:48:b8:08:20:56:d7:ce:d9:19:f3:
         56:14:78:9c:ae:ba:e0:ed:d3:84:ff:48:a0:f8:60:cd:4a:53:
         df:f1:e4:4f:ca:96:dd:da:b4:d5:93:c8:83:77:ef:e9:ee:68:
         06:c2:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:49:56 2025 by rpki-client