Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa
File:                     1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa (raw, json)
Hash identifier:          V9XGUj49qYIzKiNsZJUmgPM4e7Is0a0KncRh5EFqtFU=
Subject key identifier:   F8:C4:28:DC:EC:A5:62:88:C0:94:6F:1C:02:3D:23:E3:D3:53:FF:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5DAB63A1202FEB26CA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa
Signing time:             Tue 22 Jul 2025 12:41:21 +0000
ROA not before:           Tue 22 Jul 2025 12:41:21 +0000
ROA not after:            Mon 20 Oct 2025 12:41:21 +0000
asID:                     36620
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5d:ab:63:a1:20:2f:eb:26:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:21 2025 GMT
            Not After : Oct 20 12:41:21 2025 GMT
        Subject: CN=9be38cb4-5c0e-41b8-a504-a0e2e6c9b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:47:1b:98:04:33:da:ea:3a:1d:41:7b:99:
                    db:d6:98:24:2a:69:e6:1a:b2:b1:45:99:54:35:62:
                    65:41:00:cc:08:6a:f9:32:be:ba:3e:86:b6:77:f8:
                    14:be:28:b7:1f:c1:20:64:07:80:b6:76:26:c1:0d:
                    66:46:c1:e4:f3:06:ac:a1:63:e5:0b:68:09:29:13:
                    e7:25:18:51:32:b5:ba:53:7e:d9:17:ec:88:85:4a:
                    5c:66:e7:52:56:e2:cc:02:df:bb:b1:6f:90:c9:59:
                    82:72:c9:08:0b:96:8b:e9:7b:bf:86:1c:c3:5b:c1:
                    0c:75:ab:22:94:aa:23:de:2d:66:1d:a5:ec:99:4b:
                    80:be:88:08:26:ca:c4:ee:0f:70:9b:94:58:8b:de:
                    79:d3:a0:f7:a2:98:06:67:55:35:8e:9e:42:65:bb:
                    d3:cd:98:0e:e5:e5:98:b8:1f:87:b6:a8:1f:57:9b:
                    d0:b2:6a:18:36:3e:db:84:f2:ab:57:79:9e:31:b8:
                    3e:3b:19:7e:21:6f:d9:2f:8b:ea:41:32:1c:1c:03:
                    d4:17:28:cf:d7:65:4c:46:08:a4:22:74:25:ba:7b:
                    ee:1f:01:df:f2:0e:22:0b:14:cc:a9:81:14:ad:c6:
                    a1:ed:6c:51:47:bf:1a:f5:ad:3d:1c:bf:8a:9c:9e:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C4:28:DC:EC:A5:62:88:C0:94:6F:1C:02:3D:23:E3:D3:53:FF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:c5:43:16:3a:b6:81:64:4f:92:08:2c:a2:40:73:7a:41:
         1e:3b:88:b7:42:8a:2d:d4:15:c1:2e:34:88:63:91:96:c9:31:
         1c:11:58:28:14:d7:31:ee:98:59:6a:95:83:cd:cf:34:c0:af:
         8c:71:90:57:85:5b:ed:2d:a6:0b:1c:d4:b1:dd:d1:30:77:72:
         f1:8c:28:3e:8e:5c:82:07:07:f7:d6:47:0a:d5:da:00:bc:4c:
         fe:0b:b5:0b:ec:c3:91:37:39:18:da:4c:0e:62:d6:cb:aa:c9:
         32:a1:bf:2c:6c:ef:a3:75:bc:39:26:8c:0f:d0:89:f1:79:c5:
         f4:a4:62:a0:95:5e:62:45:04:c1:7c:cb:1e:d4:f4:24:4e:ed:
         f9:cc:65:bb:9f:ec:fa:5d:e1:c6:e3:7f:8b:61:ba:86:bf:e7:
         30:98:74:a6:16:64:24:db:88:d6:bf:ce:e1:e9:5a:c3:40:4e:
         78:a9:aa:ba:7a:2d:f6:b1:2a:0f:a0:4a:08:54:1b:bf:6a:00:
         b3:02:57:22:c5:34:da:2f:40:73:f6:de:7d:24:2a:11:30:81:
         fc:6c:f7:a7:62:6b:02:90:58:8b:79:5d:1b:50:62:c3:c1:a0:
         cf:c4:bc:04:3d:d8:79:c4:e9:33:a9:c1:8e:41:1b:a7:dc:3a:
         79:fb:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:02 2025 by rpki-client