Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6b92be-3b64-35cc-8168-1e3379d686fa.roa
File:                     bf6b92be-3b64-35cc-8168-1e3379d686fa.roa (raw, json)
Hash identifier:          7StAHWsCTDfujCvLPyzsNc85WbFeqkztb32HXW3qoH4=
Subject key identifier:   CF:4C:6F:B2:41:E9:85:3F:B2:6F:8F:28:8F:07:E2:E6:7E:0E:8B:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668B3C84B0F27841C17800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6b92be-3b64-35cc-8168-1e3379d686fa.roa
Signing time:             Tue 06 May 2025 12:43:04 +0000
ROA not before:           Tue 06 May 2025 12:43:04 +0000
ROA not after:            Mon 04 Aug 2025 12:43:04 +0000
asID:                     396614
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8b:3c:84:b0:f2:78:41:c1:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:04 2025 GMT
            Not After : Aug  4 12:43:04 2025 GMT
        Subject: CN=de65960c-17df-4907-ac04-32ba464a7d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:eb:ea:9d:fb:59:be:57:50:b1:7c:6a:89:
                    b7:30:c3:d7:72:66:86:28:98:7c:f7:6d:1f:99:6f:
                    17:07:b2:0f:51:1f:94:23:20:af:13:79:81:52:67:
                    34:49:9d:ed:8a:e3:7e:32:3e:bf:bc:80:68:87:f0:
                    35:25:a2:3b:87:35:7a:66:88:09:2f:92:df:9a:25:
                    ad:c1:32:3a:55:e9:35:34:71:23:4b:a4:14:69:33:
                    81:f4:a1:e3:31:20:cb:7a:fd:5f:15:04:79:51:d2:
                    37:60:a7:f6:e8:a1:af:2c:03:d6:d5:d2:df:35:ce:
                    eb:25:52:f9:59:12:d8:45:60:8b:cc:0f:dc:63:c4:
                    27:e0:c1:cc:03:b9:b8:4f:b9:cc:02:48:00:5d:19:
                    00:b3:07:2e:19:24:53:60:af:63:18:21:d6:37:3e:
                    0c:93:a3:11:4a:47:13:76:50:81:b0:f5:04:84:c1:
                    6c:ab:f7:7d:15:54:be:59:ad:6a:1b:ca:f6:2f:f2:
                    2b:99:8b:52:56:50:b7:1c:b5:25:32:d5:7a:70:2a:
                    30:a1:71:4d:b6:37:97:a0:6d:49:67:ce:6e:06:e0:
                    9f:ee:24:a8:bb:36:ab:42:94:d3:35:5a:cf:b2:a2:
                    af:c5:5c:ba:90:52:23:27:2f:2b:86:d6:1f:6e:76:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:6F:B2:41:E9:85:3F:B2:6F:8F:28:8F:07:E2:E6:7E:0E:8B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6b92be-3b64-35cc-8168-1e3379d686fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:d2:b4:c3:24:b3:af:b7:d5:ae:a0:65:82:b9:1c:2d:83:
         ca:71:60:b6:2a:ac:46:6f:40:45:ae:a7:a9:58:f1:36:c5:d1:
         a9:c5:1f:cf:ab:c0:8b:af:b8:d9:43:b0:ce:18:44:fb:e6:75:
         58:4f:aa:33:42:c1:ec:78:0b:e8:e8:8e:f9:5e:85:a2:60:43:
         85:12:48:18:aa:b6:7b:13:88:6a:6c:e0:92:da:47:f1:55:11:
         b9:db:e8:c9:82:8b:b3:cf:aa:d7:f1:05:99:87:d6:c9:be:01:
         07:fe:99:f8:e2:9f:e7:f0:15:96:b7:9e:7d:89:b9:0e:e6:92:
         8f:eb:2f:35:75:1f:6f:de:d1:63:61:45:67:04:01:9c:dd:cd:
         55:b6:ea:39:fe:59:9f:2e:1f:6c:3f:cb:55:86:ed:57:30:b0:
         8d:fe:0f:eb:9c:bf:7c:f4:03:eb:9b:26:ba:e9:0c:c2:cd:6e:
         68:d6:2d:b5:30:c0:36:65:dd:cc:17:ee:77:3a:91:5c:70:07:
         38:3e:e2:5f:b3:96:22:f9:9d:92:60:23:89:7b:b4:86:e2:7e:
         19:c6:0b:7e:49:4c:18:f6:6c:7f:fc:60:d1:12:d7:06:27:32:
         b6:16:23:89:d0:4c:43:79:40:17:94:c0:2a:64:95:3f:9a:75:
         35:c2:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:22:42 2025 by rpki-client