Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa
File:                     4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa (raw, json)
Hash identifier:          5W3qdtft5O77Raf22ek+VtJTCYmUwnR2AIwJt6iEq4I=
Subject key identifier:   23:F1:73:96:50:FF:57:79:D1:AF:F5:46:69:E2:19:95:18:DD:C6:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C51B13E92ABFBBC7A6350
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa
Signing time:             Tue 22 Jul 2025 12:41:16 +0000
ROA not before:           Tue 22 Jul 2025 12:41:16 +0000
ROA not after:            Mon 20 Oct 2025 12:41:16 +0000
asID:                     396592
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:51:b1:3e:92:ab:fb:bc:7a:63:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:16 2025 GMT
            Not After : Oct 20 12:41:16 2025 GMT
        Subject: CN=f8d2931b-6a9d-4c1c-9d07-e7d6de4da319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:00:78:48:38:43:88:d3:f6:83:58:53:cc:
                    22:bd:cc:6a:ba:29:74:af:16:a4:d6:5a:6e:e0:79:
                    a2:d7:1a:f4:e9:9f:b2:0c:94:6b:d1:2c:2a:f8:7b:
                    91:c6:57:ce:f0:ba:8d:17:d2:41:0d:f8:55:79:e5:
                    88:30:34:97:11:ac:9d:3c:d1:5b:e9:6d:60:e5:05:
                    19:66:1d:62:29:91:9e:64:5b:de:ad:f8:49:17:0d:
                    4e:c5:28:8f:57:8d:86:a1:43:f9:f0:97:66:ed:0d:
                    95:ec:83:9b:ad:e4:7e:11:cd:fb:f7:57:a2:81:fc:
                    b6:e9:df:da:04:dd:01:ed:f5:5c:27:5d:56:69:04:
                    8e:1d:99:d3:11:dc:cd:a7:b3:94:59:f3:f2:ed:44:
                    2a:60:f4:68:c9:43:f1:bd:61:1f:bd:03:5e:8a:b2:
                    57:88:eb:38:74:06:06:9d:36:e9:67:25:e8:93:fe:
                    58:43:3f:45:e5:dd:3e:9b:ec:9a:f8:52:c2:1c:9a:
                    ba:6d:24:c0:e0:02:62:74:9e:d7:14:76:1c:43:8e:
                    68:19:79:57:d2:fd:22:e5:04:81:bc:5c:96:6b:09:
                    81:4d:b6:69:86:a9:72:46:79:38:03:02:4b:57:f1:
                    1b:63:e0:69:b5:3a:ed:02:a1:eb:a5:e5:2f:d6:e9:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F1:73:96:50:FF:57:79:D1:AF:F5:46:69:E2:19:95:18:DD:C6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d7:2a:d5:8d:5e:3d:c3:14:0f:f7:51:88:92:2d:23:44:52:
         f3:fb:21:59:7f:d8:6d:5f:5d:2c:a4:da:a6:71:98:25:8d:da:
         5d:36:f1:19:21:bd:e6:8f:ae:08:98:6c:96:dc:71:a5:c6:1b:
         a1:db:28:b7:7b:73:a8:ed:ca:2d:57:37:b0:03:67:2a:12:48:
         12:46:7e:44:69:45:e2:c7:9f:ed:42:08:90:2b:c8:d0:9e:47:
         ef:87:83:dd:ae:7f:7e:8f:8a:d0:15:8b:66:40:fc:04:59:fb:
         32:21:96:b7:3b:04:97:db:25:85:83:91:68:b5:2b:8f:de:e4:
         6f:2d:93:c1:5f:34:46:f8:ce:0d:ba:2e:12:4f:6c:b4:81:4b:
         b0:d2:2a:c0:c0:8e:8c:57:72:9f:39:41:cf:f8:0e:d8:d0:ad:
         c9:99:e4:f2:60:81:d3:51:25:dc:f2:c1:64:4a:9c:17:3b:0f:
         aa:ca:72:c9:91:b6:24:0b:be:bc:f8:94:bc:4f:db:1f:11:38:
         1e:2c:23:56:61:ed:9d:95:62:8c:2d:95:04:40:9f:8c:e3:b2:
         79:73:61:51:09:38:1f:a1:d4:10:bc:bc:b7:32:b7:f8:0a:01:
         30:47:7f:3f:88:04:1c:b8:83:01:a4:3f:62:4e:ac:83:f4:7d:
         d0:4b:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:10 2025 by rpki-client