Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c979d7-b04e-38bd-bf33-1cc0fed1e8c7.roa
File:                     35c979d7-b04e-38bd-bf33-1cc0fed1e8c7.roa (raw, json)
Hash identifier:          Ge0DjYlmJd/BOcYsqxX0dUwKzN3CLxW7cKnOM0kNSt8=
Subject key identifier:   4F:F7:DB:F6:3C:C8:0D:08:2B:22:5C:F7:3A:08:53:85:AF:F7:37:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA2168BE9FC3D7399B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c979d7-b04e-38bd-bf33-1cc0fed1e8c7.roa
Signing time:             Tue 15 Jul 2025 12:37:26 +0000
ROA not before:           Tue 15 Jul 2025 12:37:26 +0000
ROA not after:            Mon 13 Oct 2025 12:37:26 +0000
asID:                     396611
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a2:16:8b:e9:fc:3d:73:99:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:26 2025 GMT
            Not After : Oct 13 12:37:26 2025 GMT
        Subject: CN=b83b766b-819b-4b6b-aed3-14cd6752c466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:79:df:53:10:2f:9a:85:67:a1:d0:0f:c5:
                    fb:b8:be:2f:41:df:2f:db:b7:67:21:9f:53:15:5a:
                    b2:7d:20:91:c1:72:82:13:dd:c1:0e:51:d3:e5:ef:
                    de:87:7b:b5:aa:ac:67:29:d0:3a:d1:2b:86:62:4c:
                    87:ad:0a:7d:96:50:67:67:90:ba:86:88:3c:0d:2a:
                    75:a0:7d:2a:76:a4:72:b5:d1:09:3b:6c:e9:11:9e:
                    8b:7c:1e:29:15:9a:78:a3:f9:c0:7f:64:ef:18:95:
                    bb:4e:a6:b4:4c:b6:58:01:ff:15:0f:b8:c8:3d:c4:
                    24:01:27:0f:79:d4:65:c3:95:7f:70:a4:f7:55:66:
                    bc:f8:00:11:30:d3:61:67:24:90:4e:fa:5e:20:8c:
                    85:f6:14:39:2b:e6:8d:94:2c:06:97:50:05:e3:22:
                    51:5b:7e:50:2d:ae:01:5f:33:f5:a4:9e:11:3f:06:
                    bf:47:d2:e7:b5:e9:68:7b:26:75:c0:08:12:a6:86:
                    25:77:2f:6b:bf:3f:ed:91:d4:46:12:87:92:6a:5e:
                    73:23:9b:ad:b8:13:0a:08:9f:e0:74:e0:ef:6e:e3:
                    2c:59:d9:d7:8f:42:23:86:da:f7:fa:4d:ad:9d:73:
                    cd:02:09:f5:91:8e:c7:75:5b:2b:39:eb:cb:f7:8e:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:DB:F6:3C:C8:0D:08:2B:22:5C:F7:3A:08:53:85:AF:F7:37:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c979d7-b04e-38bd-bf33-1cc0fed1e8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:76:91:fb:fe:80:e2:ae:28:cc:ed:1b:0f:53:51:d0:ec:71:
         8f:43:5d:0d:fa:f3:74:82:6b:01:23:77:50:5b:11:6e:9a:4e:
         00:88:8a:69:66:6c:5e:b5:1c:d6:4f:11:0c:38:f9:6b:0c:98:
         66:fc:4e:17:9e:b8:fc:22:c2:47:b7:3c:94:2a:57:eb:ae:7d:
         5e:e5:bd:f7:38:a7:19:8b:48:f7:9d:b3:61:fc:46:56:f1:2e:
         59:da:1f:53:ad:6d:1a:6a:d5:ca:57:a6:d8:3d:97:93:8a:63:
         2c:92:40:4a:00:6c:4e:14:0c:f0:0e:36:8b:2d:1b:d5:5e:56:
         6b:4c:f1:56:e7:29:0f:49:66:5d:7f:85:9b:31:a1:b6:d4:38:
         f6:00:ef:dc:b1:10:37:97:6a:6b:4d:fd:61:63:0a:e7:20:b1:
         91:87:a7:3f:12:e2:9f:a9:08:22:0c:aa:d7:0c:90:1d:7d:61:
         ee:83:ec:00:3f:c8:70:03:12:01:a2:bf:86:29:31:08:66:02:
         3e:96:aa:06:9f:ff:f5:48:eb:94:4d:97:e7:6b:9d:d2:3a:15:
         06:31:9c:94:c1:5b:0c:60:a5:ac:67:03:7c:22:7c:ae:8e:ea:
         d4:5d:e5:73:50:14:28:85:73:d1:8f:c3:bd:35:c9:68:95:86:
         53:f3:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:54 2025 by rpki-client