Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2360d1-f2b4-3598-847f-698d65bf9367.roa
File:                     cf2360d1-f2b4-3598-847f-698d65bf9367.roa (raw, json)
Hash identifier:          OLVaangILRYjzjEQsqHL3WduogUiaTTzpWvEcl0XIP8=
Subject key identifier:   76:A9:CA:10:17:3C:18:DD:6D:4F:AB:6C:DB:DE:31:E6:AC:EA:81:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A420EF9263EB4F11FF6300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2360d1-f2b4-3598-847f-698d65bf9367.roa
Signing time:             Tue 17 Jun 2025 12:36:44 +0000
ROA not before:           Tue 17 Jun 2025 12:36:44 +0000
ROA not after:            Mon 15 Sep 2025 12:36:44 +0000
asID:                     36620
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:20:ef:92:63:eb:4f:11:ff:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:44 2025 GMT
            Not After : Sep 15 12:36:44 2025 GMT
        Subject: CN=e82f647e-178b-4b89-9a2b-a912c3e1f811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:23:a2:c2:dd:10:bf:b6:0e:16:09:5a:e6:
                    97:fc:25:27:44:c8:7a:81:b6:c6:ca:c3:ea:79:ea:
                    df:49:97:41:ea:ed:6d:8d:b2:18:88:6a:49:f3:cd:
                    9c:69:52:17:8f:4d:9b:73:b4:02:d9:66:b9:4d:ac:
                    49:63:57:8b:dd:e0:a8:53:c0:db:45:41:ad:1e:16:
                    40:7e:9f:9f:48:d7:c7:4e:53:85:23:39:a5:2f:fd:
                    27:97:ea:f0:e0:6c:79:4d:fd:3e:7b:3e:18:4f:c1:
                    92:0e:a0:a9:66:02:a7:18:89:d9:dd:e4:68:69:6d:
                    ad:9b:c3:ca:61:0f:f6:63:a5:ba:b8:90:e3:5c:90:
                    dc:0a:77:5d:ca:f9:35:6e:20:1b:a1:42:8d:17:ef:
                    8d:60:08:77:51:53:91:01:88:8b:81:4a:3a:d8:7a:
                    99:96:e4:b3:2b:a9:32:d1:cd:4f:58:4c:ee:41:dd:
                    c0:fa:86:ff:a4:af:83:99:aa:77:e8:e9:34:b4:9a:
                    56:12:e8:13:ab:10:c8:cc:6a:d8:b1:0d:06:34:a0:
                    a0:4f:6b:a7:7e:bf:16:dc:b0:5b:09:02:28:3e:6b:
                    c2:44:f5:f2:0a:fa:80:8f:ac:31:27:77:79:74:a7:
                    f1:f8:02:f7:d5:fa:b0:e9:fa:3e:7e:2b:8d:24:54:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:CA:10:17:3C:18:DD:6D:4F:AB:6C:DB:DE:31:E6:AC:EA:81:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2360d1-f2b4-3598-847f-698d65bf9367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:af:a4:6e:d5:5b:88:3d:32:1d:bc:d5:c7:42:53:f0:78:
         e2:6e:9e:ef:2e:ad:b6:55:a1:2d:d7:97:c2:d0:6a:1b:d5:93:
         6a:b7:a3:75:40:9c:71:5f:60:d0:47:72:d8:d3:d3:54:d5:d1:
         2e:4b:8b:b8:c4:89:bd:c8:f0:8e:f2:85:63:a2:5d:1d:09:26:
         68:a5:9d:9d:b0:2d:f8:14:1f:e6:7c:6f:1c:e7:ae:2e:fb:82:
         d3:cc:29:7b:08:fa:06:17:47:fb:46:a2:9f:a3:90:45:61:16:
         8a:1e:98:59:f2:4f:38:a7:f2:09:8a:c9:74:61:09:c2:20:0a:
         5c:50:87:d3:fc:fc:d4:45:51:d7:93:a4:1e:24:2d:34:da:78:
         b3:ab:0e:b9:7c:43:d7:24:7a:b4:8d:bf:fb:67:a1:8b:52:1f:
         7c:7f:bb:d4:13:7b:25:ad:3c:25:45:4e:94:19:c2:d2:8d:28:
         18:84:e5:77:22:ec:03:76:c7:ce:45:18:95:f2:5f:37:b7:37:
         9b:ee:f2:92:38:de:99:f0:89:a6:aa:50:65:34:ba:7e:99:1f:
         60:d8:7e:2a:02:98:35:13:9e:8b:c2:47:b6:f4:45:0c:63:34:
         40:db:f5:f3:6e:21:77:98:3b:1e:ab:ee:e2:95:bd:ff:e9:96:
         09:50:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:30 2025 by rpki-client