Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa
File:                     7e238fc7-73f3-3d6d-963f-db645558d39b.roa (raw, json)
Hash identifier:          /2MwpkdFZu1MUPy5ubNMfYyXyLtDOzwoY7RqJ+2t1vo=
Subject key identifier:   26:23:A8:2A:67:25:3B:22:71:08:57:3C:38:51:12:59:30:6C:B7:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA22638AA6BF79395A9E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa
Signing time:             Tue 15 Jul 2025 12:37:26 +0000
ROA not before:           Tue 15 Jul 2025 12:37:26 +0000
ROA not after:            Mon 13 Oct 2025 12:37:26 +0000
asID:                     397199
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a2:26:38:aa:6b:f7:93:95:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:26 2025 GMT
            Not After : Oct 13 12:37:26 2025 GMT
        Subject: CN=4a17ce70-dabe-4449-af7c-55aacd7673e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:40:43:a6:38:59:93:e3:5b:8c:3c:d0:f2:
                    22:6c:26:12:9b:77:73:87:34:be:ac:2b:72:22:88:
                    96:c5:a3:c5:6a:7f:0f:cc:2f:f5:ab:98:32:35:10:
                    cb:7c:b3:b5:1d:31:0d:f1:54:72:55:1f:ba:83:5e:
                    aa:99:d0:7a:85:c3:02:75:ef:40:e6:c1:d6:4c:7a:
                    4c:e9:f9:d1:0d:18:bb:47:62:0a:78:3e:2d:ed:79:
                    9c:1f:85:18:97:0c:ab:a9:2f:fd:94:70:1f:9f:6a:
                    c6:fe:2d:e0:3f:2d:84:a8:be:34:82:f2:6a:24:b4:
                    ca:a7:d4:16:71:27:2d:08:b6:6a:87:41:d1:2c:57:
                    f0:88:25:e3:50:f3:b6:72:9f:12:1a:e3:a6:cc:ad:
                    d2:0b:f5:1e:c0:2a:8f:ca:91:a7:38:05:62:6d:21:
                    19:bd:88:e5:9f:83:27:e2:69:82:d1:a2:39:45:98:
                    95:30:2d:93:92:6c:83:1c:b5:cb:51:34:e0:93:14:
                    69:3d:fc:32:02:fd:b7:4f:ee:03:f5:9a:37:dd:71:
                    ed:02:be:ef:8a:61:11:b0:a3:54:42:e8:56:ee:c8:
                    80:5a:dd:8e:de:19:e5:50:1a:59:28:6b:44:9e:9b:
                    f1:33:96:d2:4d:4c:3d:46:50:95:78:58:31:f2:40:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:A8:2A:67:25:3B:22:71:08:57:3C:38:51:12:59:30:6C:B7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:82:d5:de:55:4c:1c:90:ce:dd:30:06:84:bb:58:fe:1d:
         39:9d:12:8e:16:3a:a8:38:88:ca:7a:49:05:92:a5:e0:b8:30:
         87:9e:fa:08:49:84:51:ba:90:5c:ab:61:ca:e3:e5:9e:b1:41:
         e4:08:00:4c:10:bc:9e:b1:b8:33:79:79:28:34:96:1d:db:b5:
         0f:a1:85:ae:d8:f5:98:c4:16:b9:a4:ee:98:cb:47:3f:dd:d3:
         85:ec:55:a1:09:52:1f:aa:3f:cc:e3:e1:de:61:54:71:6a:04:
         a9:3d:29:12:fe:38:39:8f:37:31:d5:b5:23:50:b7:ff:23:d8:
         3d:f8:b8:a8:0a:50:87:9e:ba:32:0e:b9:24:59:d8:61:e6:83:
         20:77:0d:ae:31:b3:74:c5:9e:df:3b:99:f1:ee:4a:a1:f3:53:
         c8:6d:73:e8:17:b9:b9:0f:21:8a:39:11:7b:7d:59:05:04:1c:
         69:14:7b:b2:e2:03:a3:ba:c2:75:f7:28:7a:7e:6f:a6:34:d6:
         3e:72:02:62:04:73:e3:a6:b5:91:0f:71:80:33:43:87:26:ba:
         76:0f:a7:78:02:04:7d:e2:79:60:82:ae:61:89:f9:5d:d5:b1:
         82:6f:68:e7:4c:69:46:4f:f9:ae:27:de:d7:d4:32:43:01:93:
         bf:47:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:09:56 2025 by rpki-client