Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480a7c12-b591-3f1a-843d-0a274e83986a.roa
File:                     480a7c12-b591-3f1a-843d-0a274e83986a.roa (raw, json)
Hash identifier:          XnGRxjl5XBKA4IjnRG/SeBYWl0VK/82X6ESfBvaQ154=
Subject key identifier:   DF:ED:1C:D9:06:22:92:2D:FD:E8:E5:32:8C:BD:DE:F4:A8:23:3A:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C539BDB659DF3233E2600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480a7c12-b591-3f1a-843d-0a274e83986a.roa
Signing time:             Tue 22 Jul 2025 12:41:16 +0000
ROA not before:           Tue 22 Jul 2025 12:41:16 +0000
ROA not after:            Mon 20 Oct 2025 12:41:16 +0000
asID:                     19836
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:53:9b:db:65:9d:f3:23:3e:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:16 2025 GMT
            Not After : Oct 20 12:41:16 2025 GMT
        Subject: CN=cc37e117-88a8-4734-bbca-571c221d7639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:8f:8e:c6:9e:47:91:23:22:6a:5c:df:74:
                    52:1e:8d:a6:0b:58:46:94:21:70:98:86:cd:40:50:
                    fd:85:7d:c2:af:09:f3:e7:22:53:74:8f:10:55:3e:
                    8c:15:a5:02:df:c8:3f:81:cb:2a:40:43:6c:ba:7d:
                    eb:b5:b7:9c:b8:f8:f9:0a:c1:21:ba:81:0d:8f:0c:
                    f4:8e:8e:2a:55:ef:ed:9e:4c:91:ee:20:38:10:3e:
                    58:8a:e6:2c:d6:0c:78:e5:3f:8a:21:82:b8:e0:87:
                    b7:d3:49:d0:a2:3a:39:74:78:f6:16:b1:fb:7c:51:
                    a5:99:1a:66:f0:b4:e4:9e:33:cc:48:a9:e3:50:c7:
                    d4:94:0c:75:90:92:a6:9c:fd:29:33:59:5e:f1:ed:
                    51:bd:f4:7f:d3:70:14:3b:94:76:9e:94:ae:ac:d5:
                    78:61:0a:78:85:a6:2d:0c:ce:9f:9a:ed:9f:64:42:
                    a9:c7:91:67:32:3b:d3:a4:cc:ac:a4:9d:ed:f4:ec:
                    c3:75:45:9d:f4:21:0a:c9:60:4e:36:6e:29:5b:fb:
                    0a:c6:07:dd:c0:b0:c8:be:f7:33:d7:87:15:8c:82:
                    de:87:bf:5a:c4:7a:90:0a:cb:04:ba:a3:54:3e:e6:
                    33:51:38:3e:50:fb:ed:4d:8f:d1:77:9d:71:c5:ef:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:1C:D9:06:22:92:2D:FD:E8:E5:32:8C:BD:DE:F4:A8:23:3A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480a7c12-b591-3f1a-843d-0a274e83986a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:61:7d:57:30:24:82:3d:60:b7:78:05:88:66:a0:a8:9f:f2:
         f6:c6:f7:94:3f:59:c3:1f:cd:30:24:52:53:df:f1:95:54:b4:
         8a:5d:ad:98:ad:e7:49:86:49:6e:5a:8b:a3:8a:66:73:62:fd:
         3c:2b:08:32:5d:bf:07:e3:74:97:2c:28:7b:0b:94:ca:59:ae:
         f3:ef:f2:55:5d:6d:0b:df:bd:d5:7b:7a:0b:0a:62:5c:d7:4b:
         09:b3:10:ae:84:4b:d6:bc:25:75:52:cf:e9:d2:a3:07:d5:fe:
         75:87:03:d6:e2:d5:ea:e5:33:50:c1:94:89:92:74:f4:1d:64:
         dc:0b:c6:46:70:d2:f7:9a:ec:0d:c4:98:43:2f:3c:95:7d:80:
         e5:ea:38:e1:60:ed:12:f4:2e:41:0a:b1:4d:f2:46:f8:5d:28:
         f8:bb:b7:a9:a8:c5:d5:a8:7a:76:99:76:28:53:3f:14:bc:19:
         13:f9:b7:54:a8:bd:a7:93:28:6b:01:e3:0a:e6:2d:00:cd:9e:
         03:0c:e5:e6:1c:3d:76:cc:5c:b1:67:28:2a:6b:1e:c8:02:70:
         c2:b3:fa:dd:0b:76:a2:b7:cc:24:b5:95:52:f4:e4:73:3f:03:
         14:aa:23:8f:dc:47:ff:bf:29:fc:0c:17:be:0f:6b:f9:fb:39:
         bd:5c:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:12 2025 by rpki-client