Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b2409-8654-3bef-b48a-2ec2ba61d1b2.roa
File:                     e23b2409-8654-3bef-b48a-2ec2ba61d1b2.roa (raw, json)
Hash identifier:          KSGaVmqFvGEXcaFwsoAepnf2/41D33Nd8aBlwLSQN9c=
Subject key identifier:   3A:C2:A4:E0:EA:59:1F:3B:CD:BD:C7:94:D4:7E:69:7D:0A:E3:3A:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668F8E64DC77FE5A9CC200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b2409-8654-3bef-b48a-2ec2ba61d1b2.roa
Signing time:             Tue 06 May 2025 12:43:06 +0000
ROA not before:           Tue 06 May 2025 12:43:06 +0000
ROA not after:            Mon 04 Aug 2025 12:43:06 +0000
asID:                     396567
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8f:8e:64:dc:77:fe:5a:9c:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:06 2025 GMT
            Not After : Aug  4 12:43:06 2025 GMT
        Subject: CN=08f486db-67cc-4d3a-9666-70394b921c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e4:91:d9:6d:44:c7:b3:3d:5b:97:4b:23:fe:
                    27:1e:f5:2d:9d:d5:b2:7a:48:39:6b:78:6a:01:49:
                    09:d6:02:2c:5a:d2:f2:14:d2:88:78:8d:b9:db:d8:
                    07:d8:4b:91:4e:bc:e4:e7:f6:f7:70:56:8b:bd:6c:
                    b9:51:8a:87:80:87:c7:8e:15:84:98:66:a4:7c:ac:
                    81:dc:48:cc:2f:e4:ec:13:70:aa:ae:7e:c0:cf:e2:
                    23:aa:21:30:6e:c4:12:b2:cf:3a:4d:f5:0d:ae:f1:
                    aa:09:45:7b:0b:f4:6b:ee:4b:0b:a9:ca:de:14:b3:
                    44:9d:44:2f:98:89:05:f7:d1:4e:d4:2f:58:1a:7b:
                    e6:72:38:13:bf:6e:b1:c2:4d:f2:87:69:59:45:66:
                    c5:27:25:a4:1d:03:de:c6:a8:50:07:d2:37:21:bc:
                    73:4c:77:4d:13:55:27:9c:69:74:d8:8c:76:f3:94:
                    9c:fd:c1:92:d0:58:1d:bc:4e:ba:ef:6c:4e:20:ed:
                    81:e8:4e:f5:01:0d:5c:dc:a9:2c:a6:c1:05:a9:23:
                    a0:99:b6:a3:b5:5e:b7:81:20:d2:c3:87:8c:a8:63:
                    31:66:83:b4:3b:0a:9a:17:47:8a:3e:9a:d8:0a:fd:
                    e4:b3:83:a5:25:2c:cc:9a:97:d9:f2:83:b7:e6:c9:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:A4:E0:EA:59:1F:3B:CD:BD:C7:94:D4:7E:69:7D:0A:E3:3A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b2409-8654-3bef-b48a-2ec2ba61d1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:e5:cc:a0:84:1c:81:ee:50:73:c3:98:b1:b0:41:9a:b8:
         03:76:d5:01:21:34:3c:69:b3:b3:c2:52:97:ea:38:05:c3:1b:
         63:ad:48:1a:dc:71:0f:4e:24:c6:f2:ed:04:7a:47:13:fa:5d:
         60:f7:83:fc:7f:24:ea:79:a7:64:27:27:d9:f4:d0:54:07:43:
         08:d3:27:30:9c:e6:25:72:7c:22:13:c0:dd:9f:2a:6a:09:68:
         15:ba:6b:a2:48:27:94:d0:2c:a6:04:d2:05:f9:a6:57:04:a6:
         3d:be:08:ef:68:94:21:e3:be:14:66:d0:db:46:4c:2f:e4:be:
         3d:7d:7c:7c:c2:40:65:86:10:e0:1b:85:ac:00:c9:82:53:86:
         c0:31:09:ed:95:e0:70:4f:6a:73:a1:c5:a9:81:96:aa:61:77:
         de:40:ef:c9:1a:50:e7:55:75:a0:fc:ad:85:47:b3:5b:c9:51:
         66:eb:41:f8:9f:de:22:11:07:fc:8b:f4:9e:df:23:9a:57:a6:
         7c:1a:e4:1e:8e:3c:38:be:54:ec:8f:e4:e0:bb:d6:34:3a:91:
         75:3a:1f:1c:53:8e:a7:7d:94:42:a5:6c:e7:5e:cb:57:d4:85:
         f3:59:b5:24:9b:cb:d8:2a:9b:3e:3b:ca:7f:e1:4e:35:8e:41:
         ed:57:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:22:24 2025 by rpki-client