Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48589480-9e63-30c5-aad4-590aae869904.roa
File:                     48589480-9e63-30c5-aad4-590aae869904.roa (raw, json)
Hash identifier:          i6r2mh+QfJWDvUlh+L/vvvpj9+JUDe/OrGpHNv+rMCo=
Subject key identifier:   4D:EC:76:BF:70:92:6C:13:AD:3C:F8:76:7F:0B:D8:00:0D:5B:76:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290994BB3DE69AA516134F4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48589480-9e63-30c5-aad4-590aae869904.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396827
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:99:4b:b3:de:69:aa:51:61:34:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a6a6a3a0-25a5-48f4-8d55-8bf30a0407dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:80:05:0b:be:8c:fe:09:3a:7f:cc:64:83:
                    0e:44:17:f2:73:dd:84:4a:f1:f5:78:97:84:76:ea:
                    55:a9:e7:62:c8:de:89:17:bc:5a:19:12:9b:de:fc:
                    59:e2:02:d6:3b:d0:27:3e:2b:e4:59:76:fc:c9:87:
                    10:14:73:42:6d:90:5e:d9:95:db:e9:7b:57:32:7c:
                    5a:c8:21:34:33:db:b8:59:75:c7:9e:7b:86:0a:2f:
                    d8:26:e4:5a:f8:34:63:3f:2a:69:d5:34:ec:4b:87:
                    45:9e:20:77:28:f2:d7:15:07:1d:32:45:65:e4:3e:
                    80:b9:00:74:90:02:9f:90:14:45:c9:b2:42:c3:6f:
                    37:ee:ea:c7:7c:b3:bb:69:b4:18:7b:25:c9:60:b3:
                    30:23:f9:31:0c:0c:de:5b:fe:5d:02:f0:5d:0d:d7:
                    65:ea:bd:42:17:2f:ad:6f:5f:89:fc:d5:5d:cf:33:
                    cc:7c:7d:09:b7:2a:81:c6:5d:98:9f:81:52:df:b5:
                    0d:47:f6:d5:3a:c7:22:e7:0a:8e:df:f5:40:ed:19:
                    b9:f7:f1:dc:68:06:d2:70:95:3c:28:1d:ee:1e:78:
                    a6:37:bf:b0:73:b9:7f:9b:58:e7:58:9b:9b:0c:1b:
                    18:1a:13:56:e3:6a:de:21:79:4f:04:44:ab:53:42:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:76:BF:70:92:6C:13:AD:3C:F8:76:7F:0B:D8:00:0D:5B:76:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48589480-9e63-30c5-aad4-590aae869904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:bc:3f:44:2f:dd:7f:bd:29:bd:00:61:f6:3a:e3:c2:bf:
         8a:92:37:03:d3:32:74:69:15:70:45:37:8b:f8:81:8b:3f:d5:
         cd:eb:b9:36:ba:23:38:71:8a:23:55:58:b3:f2:2f:78:41:d3:
         57:8e:52:e4:f9:4b:43:4d:b9:9e:92:c4:92:cd:3a:f4:23:58:
         46:1e:ae:0a:df:7e:78:2e:21:6c:3d:9f:f5:d1:3e:fa:3e:e0:
         56:8d:9b:64:66:58:99:ae:5e:58:ad:21:9c:d1:41:ae:8a:3a:
         13:d6:73:76:71:66:07:64:44:be:f6:e7:be:f0:ea:58:38:0c:
         9e:1f:f0:97:df:1d:a3:88:f8:a5:b1:5f:ed:87:88:04:4f:d5:
         f6:29:42:35:17:e1:61:65:0a:7b:d9:c1:e0:3a:d4:ac:a6:c1:
         c2:ed:7f:30:3f:54:05:0d:5e:5e:58:fd:04:2e:d7:db:67:e1:
         d8:6f:cb:b9:d6:e3:52:72:11:5f:9b:e8:4e:fc:2f:73:35:1b:
         35:29:43:1f:3b:ac:c0:f9:62:70:0d:db:14:d5:27:02:48:a0:
         2f:25:66:b5:60:b3:b5:47:1b:6b:aa:2c:58:d7:3d:ce:d3:98:
         f9:6e:32:a1:0a:43:49:49:66:5c:c3:3d:ff:a5:99:d3:d6:28:
         43:21:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:07:53 2025 by rpki-client