Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3cbd69a-9f56-3c4d-a0cf-4852a6242175.roa
File:                     c3cbd69a-9f56-3c4d-a0cf-4852a6242175.roa (raw, json)
Hash identifier:          QjXfaUzZ+WZ2ScIdis6ZSm9AGY2ywNF9iEwo2hBHhkE=
Subject key identifier:   2D:99:74:E6:78:2B:F7:D0:CC:70:AE:CF:E8:FF:7F:5D:C5:5E:9B:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C36689882337E76650423600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3cbd69a-9f56-3c4d-a0cf-4852a6242175.roa
Signing time:             Tue 06 May 2025 12:43:03 +0000
ROA not before:           Tue 06 May 2025 12:43:03 +0000
ROA not after:            Mon 04 Aug 2025 12:43:03 +0000
asID:                     20172
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:89:88:23:37:e7:66:50:42:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:03 2025 GMT
            Not After : Aug  4 12:43:03 2025 GMT
        Subject: CN=26906438-def4-4a13-b0c9-1907564a6679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:25:a0:c5:42:da:5a:a1:6e:02:98:de:33:
                    b2:2b:6b:1a:cc:71:0c:f4:f4:72:35:07:3a:97:80:
                    d4:ce:81:56:56:00:f8:8a:61:61:1c:dc:ed:ea:d1:
                    90:73:52:52:11:c0:41:0e:5e:d1:db:f7:31:33:55:
                    10:f9:6c:d0:11:45:8b:76:8e:20:61:9f:9c:d1:43:
                    ec:59:11:de:c4:27:49:88:87:dc:26:e5:3f:db:06:
                    b9:22:36:40:f7:e7:79:08:21:87:98:cf:78:ba:5a:
                    4d:52:15:e3:7e:a1:67:8d:cc:4f:be:90:51:b1:eb:
                    6e:a0:18:87:9f:18:09:6c:e6:bd:50:2c:10:66:4b:
                    e6:4f:28:5b:53:a9:f7:73:c5:b1:0b:47:ba:f4:a3:
                    3b:e5:da:c6:27:98:a7:68:e9:4e:bd:67:82:53:09:
                    52:f7:5f:d2:80:13:9c:9b:d3:3e:91:53:4b:51:ab:
                    9d:07:99:dd:6b:d3:a5:51:df:9a:54:f7:bd:ee:b8:
                    c0:60:f3:db:e6:87:81:e5:01:07:7c:dd:03:b4:98:
                    e8:3b:b6:78:71:3c:f2:c0:27:96:e5:f5:9b:51:f8:
                    d2:43:b2:28:3a:5c:22:96:ae:b3:21:0d:5a:e1:0c:
                    4d:2e:cc:88:39:32:3a:bd:68:df:1f:93:ca:7c:84:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:74:E6:78:2B:F7:D0:CC:70:AE:CF:E8:FF:7F:5D:C5:5E:9B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3cbd69a-9f56-3c4d-a0cf-4852a6242175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:af:bf:22:40:4f:f9:d7:8a:54:72:36:c1:40:26:2c:90:52:
         70:d9:ce:69:6e:ab:6f:46:bb:ab:75:8d:84:56:2e:f6:89:d7:
         e6:39:e4:b1:2d:97:9c:96:8e:0c:63:8e:9c:3d:c7:06:6b:c8:
         2c:de:ee:0d:82:00:33:a4:b3:af:46:f2:9f:8b:69:97:18:80:
         ea:4c:e1:8e:fa:35:f2:4c:90:d9:76:d4:cd:ac:24:8b:0b:53:
         f5:86:8a:eb:56:7d:11:8c:9b:db:01:e5:c7:85:a0:0d:c6:f9:
         95:07:3f:cc:fd:69:ec:86:4f:36:57:47:bf:3e:5b:57:d1:a8:
         ed:32:35:bd:00:9f:ea:69:7b:95:4c:ab:59:38:68:7e:56:f5:
         b2:d7:ec:1c:7b:39:b7:ae:1c:b0:3f:87:a6:90:ba:aa:a5:77:
         9a:d8:d9:ee:5b:4c:53:47:e4:af:53:e0:7b:69:ce:0f:d0:af:
         7f:97:7a:36:b4:be:f9:c0:a7:e8:7c:5b:ef:b6:5a:5e:50:ad:
         6f:c6:52:43:9d:a0:7d:9f:4b:50:18:6d:2c:e1:b1:cb:bf:c3:
         0c:93:dd:11:6c:58:99:18:a7:52:6e:36:fa:17:a8:ab:5e:2b:
         55:4b:f9:07:59:e5:03:2c:eb:6f:5a:93:6c:8e:e4:ba:77:a3:
         9d:84:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:27:24 2025 by rpki-client