Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee01547e-e971-335f-9bc5-0062e25ab504.roa
File:                     ee01547e-e971-335f-9bc5-0062e25ab504.roa (raw, json)
Hash identifier:          +Mk+jYmOQl6Ly9pMBfKRMCFft9fmh8yQULkrBD/Yprk=
Subject key identifier:   CC:3F:28:F7:A0:A1:0C:66:07:24:AD:72:F6:2B:5D:1A:32:CB:9B:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9FECC657B2374AA7B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee01547e-e971-335f-9bc5-0062e25ab504.roa
Signing time:             Wed 18 Jun 2025 12:38:22 +0000
ROA not before:           Wed 18 Jun 2025 12:38:22 +0000
ROA not after:            Tue 16 Sep 2025 12:38:22 +0000
asID:                     36629
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9f:ec:c6:57:b2:37:4a:a7:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:22 2025 GMT
            Not After : Sep 16 12:38:22 2025 GMT
        Subject: CN=66603847-eeeb-4cbc-853b-79da4427af02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:41:e3:8a:1c:e8:d0:ae:d3:18:37:7f:59:
                    a7:80:a5:15:73:dc:c8:2b:d3:27:01:4a:51:56:ea:
                    49:71:7d:96:72:ca:b6:86:e8:10:df:dc:4a:f0:b2:
                    24:a8:a0:36:fe:75:fc:06:7d:19:18:54:57:af:24:
                    33:a2:d8:b9:be:80:cc:37:6a:35:56:80:29:20:41:
                    da:10:f8:37:d0:c6:5a:85:9f:55:de:28:a3:d4:5d:
                    02:2d:0b:60:82:11:51:58:1b:63:34:95:8d:77:a8:
                    3b:2b:ed:36:93:6d:63:b0:d8:3a:a9:47:a8:4f:6e:
                    5e:06:a3:ab:ec:4d:e8:eb:ac:a3:09:9e:f0:87:3d:
                    d2:6c:71:27:06:b2:d2:c1:ef:70:cb:ab:75:41:6e:
                    ec:0a:86:ce:77:99:af:f1:55:59:8b:aa:a9:2f:73:
                    ce:28:68:04:41:b4:93:ae:f1:e3:e6:78:82:97:03:
                    34:f7:81:8f:63:d1:e2:a5:33:c0:fb:e8:03:24:51:
                    77:14:a3:2c:e8:78:fe:d0:71:80:43:4f:84:9f:57:
                    94:f3:6b:fa:28:5d:85:f7:95:bd:9a:83:ec:71:f3:
                    e8:71:c5:0c:57:10:15:0d:5c:51:3e:e2:d0:ac:24:
                    4f:3d:5d:6a:60:c2:31:8c:17:db:7e:bb:19:5f:f0:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:28:F7:A0:A1:0C:66:07:24:AD:72:F6:2B:5D:1A:32:CB:9B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee01547e-e971-335f-9bc5-0062e25ab504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:03:c5:a5:78:b7:ba:80:5c:47:f6:fb:34:c9:4c:e1:38:bb:
         22:80:f0:ef:b4:fa:bf:7b:fe:4b:2d:69:6f:8b:c5:e8:b0:cf:
         a3:e1:d6:6f:74:db:9c:43:ac:9b:50:49:08:42:83:39:25:83:
         a5:9e:68:27:fa:53:95:51:d4:dd:7a:36:a5:45:39:0f:ea:8c:
         3e:95:9e:05:14:8f:59:57:1b:9f:95:72:5f:a7:af:d8:72:6e:
         b9:ce:95:af:6c:6f:79:63:d0:b1:5b:46:a9:a9:78:6b:84:e2:
         25:fd:9d:e6:7e:ea:8d:24:71:72:d1:3d:46:d5:96:a2:98:e4:
         e5:77:ed:bf:dc:cb:5d:c3:2b:b8:35:e0:07:4e:68:cd:f4:c8:
         0a:a5:5f:62:d9:81:62:32:c5:08:c7:09:8e:ec:8c:47:f6:89:
         b6:d7:e4:25:11:7c:fe:82:d5:a4:56:84:f9:31:82:0d:e9:68:
         46:33:95:e4:49:fc:31:74:04:30:65:2b:94:83:ff:1b:01:4f:
         02:9b:6c:2b:37:1c:c4:ac:f7:31:65:36:f3:e0:66:44:7f:b4:
         19:10:d0:8f:df:19:d0:62:d1:d9:4b:8a:33:07:b0:3a:ef:10:
         f8:d3:32:98:86:91:ff:58:31:2e:e5:56:91:d0:86:ea:62:2d:
         12:0d:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:30:56 2025 by rpki-client