Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b1d5058-c2ef-346c-9a5a-79752892e8c7.roa
File:                     5b1d5058-c2ef-346c-9a5a-79752892e8c7.roa (raw, json)
Hash identifier:          EnsDu5kfLJjMJDxmkjcnVvn1aQ0H2dTnkdmf9Av4Fqk=
Subject key identifier:   05:97:CB:63:A3:63:EB:B8:93:DA:7D:0A:3D:D4:D9:72:21:84:76:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5A9C099FDE0CA0A457A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b1d5058-c2ef-346c-9a5a-79752892e8c7.roa
Signing time:             Tue 22 Jul 2025 12:41:20 +0000
ROA not before:           Tue 22 Jul 2025 12:41:20 +0000
ROA not after:            Mon 20 Oct 2025 12:41:20 +0000
asID:                     36632
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5a:9c:09:9f:de:0c:a0:a4:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:20 2025 GMT
            Not After : Oct 20 12:41:20 2025 GMT
        Subject: CN=62c227c3-320d-45c2-9a53-592422352a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:98:0f:7b:fc:8a:ce:1b:52:67:ae:6d:5a:
                    d6:cb:2b:e6:15:16:29:6b:c1:8f:1f:22:c5:a3:d2:
                    91:83:1e:91:5f:f7:ac:19:5b:16:45:ab:55:11:ed:
                    5a:39:a1:e6:7c:65:ca:ad:34:a7:ae:b0:e2:48:b9:
                    f8:04:f9:80:54:9b:39:aa:76:4d:51:2f:07:f2:60:
                    28:23:28:7f:b1:12:a7:03:b1:a5:22:1b:cd:e8:49:
                    44:40:e3:92:43:b8:0e:8e:f1:19:bc:f6:fa:bf:dd:
                    01:76:ab:63:b8:3c:da:1b:7b:84:cc:a3:1c:42:98:
                    25:14:65:4d:03:ef:66:48:92:7f:fb:12:02:45:52:
                    13:7b:1d:59:fe:c7:6c:ed:26:c8:1a:e8:45:07:d5:
                    32:8b:ec:2c:84:2b:38:ab:ea:b2:e7:81:ae:51:85:
                    f7:17:0f:61:a6:3c:fd:b9:8e:2c:22:6a:e6:6e:82:
                    7f:a6:cc:ae:13:90:6f:27:31:26:b4:9a:df:7f:ff:
                    95:12:c8:a5:83:e6:0e:27:59:ae:38:03:89:17:0b:
                    31:de:dd:cb:ad:8d:69:b8:d4:cd:f6:f2:09:df:82:
                    71:10:38:38:c2:26:71:23:e4:53:11:c1:41:94:b6:
                    48:b0:05:73:53:a2:9f:87:94:49:7e:f9:4a:ec:71:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:97:CB:63:A3:63:EB:B8:93:DA:7D:0A:3D:D4:D9:72:21:84:76:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b1d5058-c2ef-346c-9a5a-79752892e8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:61:74:2b:ea:20:42:61:22:71:67:38:f0:9d:32:69:e0:
         7b:9a:7d:2d:ee:72:0b:4b:22:58:b7:d8:68:f0:bd:bf:98:48:
         07:dc:8a:ba:f0:ff:ba:9b:e9:37:75:74:49:96:ad:b8:9d:fe:
         47:ea:cc:65:54:b5:79:3b:8a:ef:87:be:ae:93:cf:c4:57:9c:
         03:d3:87:7e:e8:ab:42:1c:77:cc:f1:70:be:93:9c:a5:f5:0f:
         61:a9:db:54:c0:74:17:8e:be:80:db:68:cb:e3:2e:e2:8e:21:
         b9:3b:38:01:ad:16:fd:c0:b7:36:d0:a8:4c:44:90:ad:b1:c9:
         fe:88:5a:a8:34:c1:2c:e7:7a:44:f5:8c:11:85:aa:e1:cf:34:
         a4:49:a4:0b:82:6e:70:39:37:27:55:75:fd:b9:f6:35:bd:22:
         4a:c5:db:39:99:f3:ca:3f:0b:af:be:99:bd:49:b9:3d:04:79:
         34:8c:19:80:ea:4c:68:18:6a:32:65:34:19:03:e8:5d:2b:4c:
         77:5e:1e:26:3d:32:6f:09:99:0b:e4:e4:b2:fd:ea:b1:32:18:
         a4:c1:fb:2e:ba:3e:1a:5b:f2:e3:9a:9d:e9:10:a5:b0:ea:cb:
         ce:a4:24:49:cd:c6:52:62:9f:eb:c1:a0:39:27:31:a4:36:39:
         e0:85:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:13 2025 by rpki-client