Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691bb092-61db-377e-b19c-71a02dd8ddef.roa
File:                     691bb092-61db-377e-b19c-71a02dd8ddef.roa (raw, json)
Hash identifier:          B55NcYM5ENGv1x0eQ87DSnHhY/AfSST5ZHTY7XiZtiI=
Subject key identifier:   AA:25:61:41:AB:1C:E7:B1:7A:42:CE:49:39:AA:0F:87:B0:C9:1D:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4DF6A3032C0266781800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691bb092-61db-377e-b19c-71a02dd8ddef.roa
Signing time:             Tue 22 Jul 2025 12:41:14 +0000
ROA not before:           Tue 22 Jul 2025 12:41:14 +0000
ROA not after:            Mon 20 Oct 2025 12:41:14 +0000
asID:                     397201
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4d:f6:a3:03:2c:02:66:78:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:14 2025 GMT
            Not After : Oct 20 12:41:14 2025 GMT
        Subject: CN=a36c7b55-ec4a-41e8-9cb6-383c17957ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:14:b3:79:78:0f:98:d2:d9:84:aa:41:d7:
                    f5:8e:b9:67:99:f7:4b:c3:b4:00:1d:dc:69:9d:79:
                    16:46:b2:fb:d2:89:4a:0e:dc:7c:6d:5e:ec:df:4c:
                    b6:7f:1a:0e:36:57:58:5b:d1:ea:8d:cc:0c:c7:70:
                    67:ea:b8:61:0f:73:d4:35:54:b8:d1:80:84:2d:a8:
                    cf:22:eb:8a:7a:72:0b:3a:58:fa:4a:5d:a1:74:21:
                    dc:c4:81:da:94:f6:58:12:d9:92:58:26:6a:a3:44:
                    0b:85:52:29:33:3b:bc:d4:da:16:bb:53:21:aa:d3:
                    c9:e7:c4:79:7c:8f:eb:dd:70:ea:21:45:21:89:71:
                    32:9c:47:6d:d1:12:79:fa:89:6d:6b:33:80:eb:e6:
                    71:d6:05:b9:5d:85:87:02:e3:50:ad:c2:f9:67:fc:
                    1d:d7:dd:46:df:c8:c4:a6:d8:90:92:85:45:52:e9:
                    74:47:b1:6d:3d:5c:73:a2:21:97:f7:4c:9a:f7:5a:
                    72:d8:3b:3d:a5:50:a8:ed:01:67:56:d7:f0:16:d1:
                    15:72:31:e7:f9:d9:af:db:31:56:4f:ae:33:42:50:
                    e5:21:16:2e:60:70:af:7d:03:fa:ef:8b:9b:e9:07:
                    4e:17:28:56:cb:9d:09:3e:66:3e:85:11:50:30:df:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:25:61:41:AB:1C:E7:B1:7A:42:CE:49:39:AA:0F:87:B0:C9:1D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691bb092-61db-377e-b19c-71a02dd8ddef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:5d:31:51:e5:c3:42:1b:af:c8:e3:4a:12:1f:37:9c:87:
         0e:22:04:12:32:87:35:c0:c0:d8:2b:2f:3e:e6:b1:99:53:cf:
         68:b4:f5:09:04:91:48:76:70:b0:5e:cc:bd:26:d8:86:b5:2e:
         1f:eb:3c:0e:fc:f8:a7:02:b1:a3:a3:eb:09:02:37:39:75:c8:
         3a:fa:2f:d9:d6:e4:d4:78:48:16:80:6e:64:2c:c5:c8:ea:25:
         3e:ed:0a:d7:cd:72:a2:48:74:f3:6b:3f:98:93:64:d8:a5:3a:
         c2:f8:5d:35:c0:80:e5:25:a2:4e:48:1c:a6:24:44:bd:f5:d1:
         fd:93:be:df:54:a3:0c:0d:49:19:e3:80:3c:df:76:e4:f6:1d:
         ea:51:82:34:e9:01:cd:f1:d8:3f:29:a7:d8:b9:97:0e:75:3f:
         3a:f0:70:31:c6:99:6d:4a:51:fc:b6:cd:cf:e4:4d:25:33:7b:
         1e:d8:84:e2:26:0d:05:fa:40:9a:f5:52:7c:6f:d3:3d:2c:e2:
         ac:52:3a:4d:f3:60:37:cc:5f:95:87:58:f6:17:b4:f0:5b:d8:
         2b:02:4e:ca:6f:bb:c0:a2:91:81:41:0c:77:07:27:12:5a:cb:
         34:c4:f5:4a:95:4f:6f:60:9e:62:ea:38:ef:80:64:50:99:26:
         89:62:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:29 2025 by rpki-client