Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa
File:                     e3dd6957-e308-39b1-851f-e85cfb7af545.roa (raw, json)
Hash identifier:          q624dWJH0brZTeW2BY9/zB+f1fS9oCRq+TVFktzj63E=
Subject key identifier:   A9:2C:5F:E5:A2:0B:A8:DD:ED:6F:06:79:91:78:66:BD:DC:85:EE:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DB11469D8D08AE8E6EE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa
Signing time:             Thu 15 May 2025 12:24:55 +0000
ROA not before:           Thu 15 May 2025 12:24:55 +0000
ROA not after:            Wed 13 Aug 2025 12:24:55 +0000
asID:                     396590
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:b1:14:69:d8:d0:8a:e8:e6:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:55 2025 GMT
            Not After : Aug 13 12:24:55 2025 GMT
        Subject: CN=9f45c2b2-af21-4f68-b2fb-66c1c146ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:c9:53:36:5e:cf:9e:63:2e:f6:1f:08:a0:
                    39:de:93:22:59:2c:2a:8e:30:d1:ac:97:27:c9:27:
                    e7:6d:c1:8d:d2:09:87:a0:19:e6:77:b1:94:0a:e2:
                    37:b0:19:86:28:38:7c:d7:d4:61:78:60:7f:b3:58:
                    84:53:17:db:52:1f:23:8f:7f:96:0a:76:fa:e3:ec:
                    b2:ba:02:40:32:02:62:58:42:b2:f9:f2:28:9b:d5:
                    a8:21:1a:24:18:73:6a:53:c8:f6:41:cf:4e:14:a8:
                    a3:0f:9c:6a:d1:0c:19:a3:96:e3:a9:e0:c6:a3:88:
                    b8:22:32:fb:7a:1c:55:8c:1f:fa:40:24:35:3f:f4:
                    18:8e:51:b8:9b:55:f7:14:0d:a6:7d:ba:81:b4:ad:
                    49:c3:12:56:43:c0:93:5e:3f:33:35:ae:84:81:45:
                    49:12:18:bb:d7:2f:af:70:ac:2f:8a:10:01:a0:7a:
                    28:93:44:5e:bf:00:7b:e7:62:c6:7b:d5:6a:ce:4d:
                    07:3a:06:25:8b:9c:ac:fd:59:24:0e:2c:ea:4c:39:
                    ef:19:26:5b:06:0d:2d:da:df:1b:df:fa:5a:c9:21:
                    62:c3:4b:6a:eb:f4:b9:45:88:cb:95:b7:a5:0c:25:
                    61:b1:e5:d8:70:24:89:5c:c5:1d:76:09:e0:11:57:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:5F:E5:A2:0B:A8:DD:ED:6F:06:79:91:78:66:BD:DC:85:EE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:48:35:6a:9a:45:e0:8e:4a:5f:a8:48:5a:54:7a:dd:d1:86:
         06:f9:2b:2d:18:e8:5a:fe:b1:5c:d4:4e:de:4b:e0:6a:60:6c:
         0a:eb:3c:35:b0:e9:de:b4:08:2b:33:e7:a8:58:3c:ab:cc:3d:
         1e:97:b3:c2:82:14:82:c1:d4:c2:b3:67:53:d6:af:3a:8b:25:
         94:d2:21:74:0e:91:5c:78:88:5c:0f:1d:8b:3e:85:b2:c8:ee:
         bc:0a:e3:64:94:bd:f4:c4:bd:1d:91:59:90:93:4c:05:3d:45:
         45:74:54:13:cc:a4:d7:b2:5e:43:c1:2d:8e:8b:a7:77:3b:58:
         55:ff:1e:f6:1e:2b:75:42:5e:65:4f:7d:2a:5a:ee:f7:3e:24:
         eb:d3:d9:b5:04:da:3e:57:22:b2:f7:6c:61:ea:f0:69:35:bc:
         cc:70:a4:53:37:aa:00:80:00:4a:5e:6d:65:5a:af:35:03:c9:
         30:18:07:c4:69:15:06:72:4b:54:35:54:69:1c:d7:8a:79:6b:
         36:0f:f9:cf:57:b2:ea:12:88:57:f9:9c:ea:56:39:c6:d9:65:
         d7:c1:17:01:ba:ab:81:38:61:e0:75:6c:f5:e4:e9:ee:87:47:
         39:72:94:d5:b3:70:33:f9:08:1e:2f:e0:32:cd:4f:2a:b7:3b:
         4b:8b:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:41 2025 by rpki-client