Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa
File:                     6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa (raw, json)
Hash identifier:          tVo1eujvXgez8qXii0ZRtDTS3DE2CGGD6L2KUgNXRA8=
Subject key identifier:   BC:C9:45:F1:D9:CC:75:9F:38:97:CE:64:0E:77:D1:98:C8:A6:A4:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA0F9E9D2837FF05ABFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa
Signing time:             Tue 15 Jul 2025 12:37:26 +0000
ROA not before:           Tue 15 Jul 2025 12:37:26 +0000
ROA not after:            Mon 13 Oct 2025 12:37:26 +0000
asID:                     396606
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a0:f9:e9:d2:83:7f:f0:5a:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:26 2025 GMT
            Not After : Oct 13 12:37:26 2025 GMT
        Subject: CN=699ee431-aa9f-4255-a7c5-3a60258ab9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:99:50:fd:e0:f2:fd:35:33:25:23:90:40:
                    94:f1:ab:ad:37:fe:1f:e8:1d:57:d5:d4:89:39:ff:
                    55:aa:f9:e7:af:c6:f2:78:c8:80:e3:e1:71:66:3f:
                    d6:57:d0:3b:c2:69:76:4e:b7:b0:4b:73:cc:de:50:
                    3d:21:3a:3f:ac:6e:12:cc:03:d9:f6:29:00:60:62:
                    c2:5d:04:15:f2:f5:de:52:a1:22:fd:3e:e1:d5:63:
                    10:8b:77:9b:c0:0e:37:58:61:bb:f0:d3:0f:ce:58:
                    5d:05:b3:8b:53:3a:60:bc:7b:8e:60:90:02:0b:1e:
                    e1:fe:5b:4e:9d:15:79:4b:a2:84:2f:95:b9:74:1f:
                    ed:18:85:0b:d0:b4:09:1b:68:cf:ef:b8:50:79:d4:
                    a2:92:75:7e:ba:42:2e:e2:8e:e8:9e:07:1e:fb:87:
                    9c:c8:e8:49:23:b7:44:2d:be:55:f6:91:6b:d4:5a:
                    4a:0e:54:ad:14:d2:8a:f8:01:5d:b1:da:f2:fe:a6:
                    ae:2f:57:e4:17:ae:8e:ab:59:6c:c1:a4:2a:a0:7c:
                    ba:76:a0:1a:b6:30:e3:0e:11:d6:e9:71:b7:63:b7:
                    ca:1f:d7:48:20:8a:de:ef:46:28:ff:72:ad:a3:66:
                    a4:91:e9:c8:70:9a:4a:4c:7d:5d:ed:34:4d:3f:25:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C9:45:F1:D9:CC:75:9F:38:97:CE:64:0E:77:D1:98:C8:A6:A4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:70:b8:78:d3:b9:10:db:b4:84:45:cc:0b:c5:f0:16:c2:5c:
         12:fa:6a:3b:f6:06:ae:41:e0:d7:d9:f2:44:cd:2f:83:6e:a7:
         55:9c:61:b5:f5:d6:63:b0:5b:f7:9b:61:34:4b:18:d9:9f:9f:
         da:df:b1:78:95:6b:dd:0d:14:bf:98:00:24:17:51:76:93:64:
         5a:5f:5e:38:ac:80:c2:a2:ae:e2:2b:0a:a7:58:ed:d1:26:a0:
         72:ea:89:2f:29:d3:3c:91:b3:ea:54:5d:50:3e:40:8f:58:db:
         2c:56:d2:6a:12:fe:ad:bd:87:ec:80:3f:39:9b:e2:35:c0:02:
         60:a1:6a:bc:b9:23:e6:6f:d7:e6:de:5e:36:e6:cd:72:94:40:
         b5:07:ee:82:27:fc:43:8f:5a:bb:10:c2:c8:2b:ee:d0:04:06:
         43:a8:be:a0:52:f6:b1:71:b0:3a:e2:e8:0a:8a:09:3d:e1:4e:
         fe:01:37:17:1a:d2:81:73:a1:5c:40:5b:25:4c:ca:49:75:5a:
         ad:80:ed:20:da:e9:62:33:d8:47:ed:f4:be:84:6b:a3:1c:f4:
         82:4f:1a:1e:be:85:17:b0:0b:40:a5:e4:1c:aa:cf:b0:6e:75:
         0f:d2:85:fc:74:d5:ae:65:d7:79:e2:2d:37:71:92:62:c2:d3:
         32:69:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:21 2025 by rpki-client