Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa
File:                     9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa (raw, json)
Hash identifier:          COujOAogfEwZA1l8iIZvhEGC7rafgDwo3dMulQfS0zM=
Subject key identifier:   F5:90:BE:BE:E7:45:97:18:46:9D:81:37:5E:15:41:D9:9F:2F:32:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668D693AD9A71A5F5D73E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa
Signing time:             Tue 06 May 2025 12:43:05 +0000
ROA not before:           Tue 06 May 2025 12:43:05 +0000
ROA not after:            Mon 04 Aug 2025 12:43:05 +0000
asID:                     396610
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8d:69:3a:d9:a7:1a:5f:5d:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:05 2025 GMT
            Not After : Aug  4 12:43:05 2025 GMT
        Subject: CN=ec7499d8-723f-44db-91fc-45b8ac56ec62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:96:43:86:0d:2f:71:fa:8d:d3:73:60:b8:
                    f9:15:20:6c:86:33:d2:7a:f5:d9:91:9f:d8:39:fd:
                    58:1b:40:8f:75:9d:22:e4:bc:65:3f:5f:b1:ba:45:
                    f9:3f:3a:64:bc:bb:aa:5b:45:15:cf:b2:8c:7e:11:
                    16:6d:5a:60:9f:b2:bb:01:45:8a:46:6a:e8:6a:2a:
                    dd:b0:3c:4b:01:2d:59:5d:3d:fd:d7:3e:c9:c5:e5:
                    6a:4e:7c:d7:e8:77:06:1d:7f:43:f4:c6:83:97:1c:
                    34:f8:2b:08:44:9e:b0:18:90:6d:7e:f6:c4:bb:40:
                    c8:91:76:31:aa:44:e7:ef:0a:18:3c:5e:90:4b:d0:
                    00:71:1f:53:60:4e:15:f4:34:be:01:4c:9c:bb:b6:
                    0d:21:14:4d:b3:77:7a:c7:4c:c2:e5:e9:10:40:c7:
                    1c:eb:d2:0c:37:1b:b0:05:28:fa:d7:97:64:93:06:
                    4f:13:f3:41:f6:b9:ed:1a:82:5a:de:f8:d7:18:75:
                    cc:fa:f2:8d:34:ec:9b:fa:5b:77:ab:91:b5:3c:85:
                    e3:45:55:bc:40:6c:f7:51:24:2e:10:c1:e1:aa:96:
                    85:be:61:17:dd:92:be:4e:c6:95:51:3b:95:fb:87:
                    8e:c5:e5:87:35:09:ce:b8:03:f3:20:52:b6:f3:3e:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:90:BE:BE:E7:45:97:18:46:9D:81:37:5E:15:41:D9:9F:2F:32:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:9e:e3:b2:d6:6f:51:c0:47:69:d6:e4:4c:ab:c8:d4:30:
         af:d1:a4:96:1f:c1:01:7a:37:49:0a:8b:97:6a:33:94:3d:ec:
         d2:71:4b:c0:f0:7c:fa:47:9f:94:1e:75:95:37:5c:92:45:a9:
         b4:20:fc:f0:be:ab:11:3c:56:40:e8:02:9a:ad:c4:3e:99:60:
         6d:2c:9f:15:ca:c3:ca:05:9b:0f:fe:20:a4:44:a7:7c:7e:b8:
         fd:6a:c4:6e:9c:29:ee:2c:cb:21:84:15:5a:69:f3:d7:11:56:
         f4:4e:78:ae:6f:00:e4:53:1b:5a:5e:d2:5d:61:a4:ac:d6:a9:
         18:a6:e6:af:9a:75:7e:2d:13:9b:16:25:5e:2b:87:0d:37:b6:
         8c:7d:f5:06:69:61:82:6d:e0:e3:49:01:e1:0a:ba:d3:c1:70:
         a5:63:80:47:82:18:8d:85:39:77:60:50:85:43:88:33:ac:4f:
         60:ec:69:b0:c8:b2:c5:c2:c1:b6:f7:85:2a:58:52:62:64:62:
         e5:7b:9c:b1:b2:43:f0:44:2c:f9:24:45:97:0f:b8:6a:61:ab:
         be:ba:d3:1f:aa:13:ff:a5:02:26:79:f5:92:31:37:10:b9:0b:
         6d:91:d3:7a:42:41:2e:e6:f1:81:d5:90:73:7b:98:cf:2d:5c:
         d4:60:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:26:14 2025 by rpki-client