Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab715a5-84d8-39c6-8aec-e1f55bc2243a.roa
File:                     4ab715a5-84d8-39c6-8aec-e1f55bc2243a.roa (raw, json)
Hash identifier:          E7P0pTo0ZHnWK1UvW7Kj7JDrCIZSK+VYzNiwext/1F8=
Subject key identifier:   89:7F:F0:3D:EE:34:8D:FC:2F:D0:B2:1C:09:33:39:80:56:D7:AE:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C57449BBF9AB863444F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab715a5-84d8-39c6-8aec-e1f55bc2243a.roa
Signing time:             Tue 22 Jul 2025 12:41:18 +0000
ROA not before:           Tue 22 Jul 2025 12:41:18 +0000
ROA not after:            Mon 20 Oct 2025 12:41:18 +0000
asID:                     36619
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:57:44:9b:bf:9a:b8:63:44:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:18 2025 GMT
            Not After : Oct 20 12:41:18 2025 GMT
        Subject: CN=43390273-e34e-47bb-9806-250de295c0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:4a:12:33:10:2b:75:14:3b:a3:3c:4c:14:
                    87:d9:81:d8:00:04:2b:9b:7f:a5:03:7a:c2:69:bb:
                    3e:41:c7:23:fe:10:15:3d:ca:26:fa:7a:55:37:d6:
                    2d:44:d3:22:55:56:c5:45:bd:95:99:25:67:b3:80:
                    39:78:f7:42:97:44:9e:82:cb:8f:1b:f0:ed:99:21:
                    7a:fc:ff:b5:ad:92:6b:95:6a:3f:42:98:d1:a6:46:
                    e9:82:b5:d0:7c:77:2f:44:e3:be:33:80:37:1d:ba:
                    4f:8d:92:78:c1:8d:4c:9e:01:f9:00:04:1c:76:29:
                    67:e1:91:69:cb:c2:1f:9a:5e:42:ec:95:e5:d4:05:
                    02:d3:9b:47:9b:85:96:c0:73:8e:9a:6c:9e:9c:b1:
                    09:c5:57:7a:86:51:11:8c:69:84:bd:40:d8:27:f5:
                    9f:8a:0c:2a:ba:ee:36:35:7a:39:d4:e4:03:83:1a:
                    97:c2:a1:84:ac:2a:1b:fd:db:a5:d9:9e:ab:80:13:
                    2f:2e:9e:b8:3c:55:10:4f:21:5c:2c:58:7c:55:cb:
                    89:8e:3a:1f:91:0b:ad:13:40:b0:5d:79:a4:c6:44:
                    c4:ae:6d:62:b5:0e:9d:3c:c2:b5:49:09:b3:f5:2b:
                    46:cc:4e:20:ac:6e:61:68:75:d0:23:d9:b1:bf:34:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7F:F0:3D:EE:34:8D:FC:2F:D0:B2:1C:09:33:39:80:56:D7:AE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab715a5-84d8-39c6-8aec-e1f55bc2243a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:00:4f:db:a6:36:c8:4d:c3:b7:bc:c2:25:0e:51:fa:ee:91:
         65:06:e9:7c:ae:14:d0:02:b8:06:c6:fa:02:17:3b:0a:0f:b3:
         5b:0d:dd:0a:6d:00:65:f5:9f:b7:55:ff:5b:0b:0d:f8:cb:10:
         2a:ed:38:04:85:8b:ea:2d:f6:c0:78:c0:b4:23:2a:9f:74:14:
         a8:d3:df:b4:29:3b:11:1b:cc:03:31:83:70:f7:58:18:df:97:
         e1:c5:3b:a1:d0:b1:86:7a:1a:0f:cb:09:db:ac:27:cf:e5:26:
         71:cb:9c:e1:fd:fa:e2:6f:8b:ff:42:8e:5c:1d:da:96:a0:eb:
         15:99:42:62:06:74:04:65:6a:5c:72:0e:68:87:90:fa:3b:5c:
         df:4b:a9:a2:a6:1b:0d:48:43:ac:e3:78:ff:0f:55:0e:3c:63:
         bc:e6:b9:da:e7:31:33:27:c3:84:25:13:47:e8:e0:25:f7:b0:
         91:a5:26:10:49:06:ac:d4:6e:fa:20:1a:bc:aa:54:87:24:1f:
         9d:61:af:f9:d3:53:1d:bc:a8:57:00:e1:08:67:69:a7:da:ea:
         0d:47:6a:a5:4e:15:02:7f:a0:a9:9c:cf:b4:f7:ea:05:80:a4:
         b7:45:b2:84:4e:c2:ae:10:8d:df:ae:62:3f:a2:55:75:7c:f0:
         ef:dc:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:12 2025 by rpki-client