Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa
File:                     52263be1-da0a-385d-8bf1-b381eb1b2591.roa (raw, json)
Hash identifier:          cV/YGRRtJBHVKpNMXYFkainbnvOhjTUBfk/gIk0vrQY=
Subject key identifier:   AF:04:49:99:51:12:73:DA:9D:4E:6B:FE:C2:7A:3C:6E:1C:7A:3C:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA3B4AA70468C4680AAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa
Signing time:             Tue 15 Jul 2025 12:37:27 +0000
ROA not before:           Tue 15 Jul 2025 12:37:27 +0000
ROA not after:            Mon 13 Oct 2025 12:37:27 +0000
asID:                     397212
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a3:b4:aa:70:46:8c:46:80:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:27 2025 GMT
            Not After : Oct 13 12:37:27 2025 GMT
        Subject: CN=010ec5b2-27a2-4f64-9eaf-23be54c3c95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:63:c6:45:e7:30:1e:b5:38:4d:ef:4a:f3:
                    8f:d3:45:bd:bd:cc:6d:77:f8:82:4e:a7:1d:e6:dd:
                    75:57:46:8b:99:b7:49:31:da:a4:4c:10:70:21:03:
                    98:85:5f:69:ef:ea:99:62:5e:70:e7:08:f1:6e:19:
                    d6:f3:ff:a3:a1:89:16:38:19:d5:1e:87:4c:8a:f9:
                    fa:fc:91:05:15:e7:91:5b:f3:58:29:a0:50:09:94:
                    f8:2b:aa:c1:d8:7a:61:e7:76:0f:e5:5e:11:7f:71:
                    1e:cf:d1:81:83:df:c5:23:1a:44:22:c4:f2:b1:1a:
                    8a:37:fc:03:90:b5:e0:61:d1:5f:91:0c:cc:bb:d4:
                    b2:d2:87:08:dc:e4:56:fa:b5:90:2a:cb:cd:44:68:
                    59:e8:38:f6:44:ab:e2:8f:bb:24:77:d8:65:a7:80:
                    3c:ef:bb:51:cf:18:2a:01:1d:f6:84:16:b5:64:22:
                    c8:86:dc:4d:1a:5c:83:d9:2d:97:a3:20:c6:c4:eb:
                    9d:4b:63:a0:be:a1:1d:1f:83:be:cd:cd:db:f1:8b:
                    80:bd:db:6d:a3:e5:62:8e:68:8d:4a:c1:7d:4d:da:
                    ce:be:11:97:ad:a5:d8:1c:48:42:f1:7f:a8:a3:7b:
                    78:08:27:31:64:57:a2:67:49:68:df:ce:29:63:7c:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:04:49:99:51:12:73:DA:9D:4E:6B:FE:C2:7A:3C:6E:1C:7A:3C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e0:33:49:37:06:48:fc:b4:73:4c:9c:a6:08:3f:68:d5:39:
         a3:cd:04:82:9c:bf:8c:bf:74:29:50:91:81:30:64:56:b4:ca:
         57:4b:62:a0:e5:fa:6b:3b:fa:32:c6:86:54:17:f3:2a:65:a8:
         31:bc:18:bf:7e:8b:aa:5d:0d:ae:8a:eb:31:a7:4c:cc:c8:89:
         2f:a7:15:41:2c:7a:63:50:49:39:9e:be:c5:3a:f3:20:62:11:
         01:db:9f:cb:dd:c4:b4:5e:4e:8f:b3:e1:84:4b:f7:db:10:76:
         83:fb:ec:1e:b5:bb:32:11:32:c1:62:24:6c:0a:0b:d5:e4:1f:
         14:89:d5:d7:6d:27:57:b0:cd:b5:60:aa:72:b7:32:58:0d:23:
         b0:9d:f4:67:0e:82:79:fa:b4:5b:c0:99:36:7c:86:42:76:51:
         36:23:6b:f2:1e:30:a6:4f:1f:b9:54:61:e6:4b:a7:76:3c:a7:
         1a:40:bc:0f:cf:cf:ac:f6:fc:53:f5:bb:1e:aa:84:3f:98:b4:
         ed:d6:23:e3:47:dc:9c:2d:bd:43:c8:1e:24:3f:77:96:73:c3:
         73:97:a6:66:1f:76:e7:88:70:40:bb:91:13:a5:9e:0e:53:8f:
         0c:f2:c2:50:c5:69:92:ef:cd:9b:1c:08:c3:ab:a1:60:74:d7:
         55:0a:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:25 2025 by rpki-client