Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa
File:                     cb7edf51-994b-3739-bf8a-595cd16f5333.roa (raw, json)
Hash identifier:          3lWYdgVyNXEa3XPagfc9tuWRpVOv2KIvSnqG3rbwNDo=
Subject key identifier:   E3:26:C3:4B:2F:27:E3:47:16:93:D9:7A:7A:48:77:50:21:92:B2:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA2CCA806C023A603F340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa
Signing time:             Tue 15 Jul 2025 12:37:27 +0000
ROA not before:           Tue 15 Jul 2025 12:37:27 +0000
ROA not after:            Mon 13 Oct 2025 12:37:27 +0000
asID:                     397207
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a2:cc:a8:06:c0:23:a6:03:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:27 2025 GMT
            Not After : Oct 13 12:37:27 2025 GMT
        Subject: CN=3ba6afe2-7c6b-4533-bdb8-f5ce8ced048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:16:39:ab:81:81:d4:cb:63:b5:8b:0c:e3:
                    9a:a6:da:e6:17:81:8d:40:c3:98:cd:7f:a7:80:7d:
                    11:20:04:9e:ad:0f:02:11:fb:83:a8:12:1b:82:65:
                    95:8a:60:9c:94:88:d8:76:a9:01:51:19:52:0f:fc:
                    c7:97:cf:6e:06:d4:1a:a2:28:7c:02:a6:5a:e0:4e:
                    4b:18:bc:62:83:54:43:db:c9:9c:2d:f7:ee:15:24:
                    b2:27:84:92:44:8c:ac:32:de:42:62:f0:a8:92:e8:
                    07:e6:d9:2e:38:ac:9f:d6:c1:04:89:9f:ca:ae:f7:
                    3c:8a:ce:09:50:be:2b:2b:4a:0a:26:1f:87:35:c0:
                    21:25:80:98:64:84:4f:84:fc:43:e1:e0:37:26:b7:
                    8e:c4:1a:cd:0e:4c:b3:fe:f6:3c:94:c4:49:0b:00:
                    4d:f5:16:a3:d6:c1:cf:8d:6a:9e:b5:da:5c:07:89:
                    0d:a2:33:b3:01:a8:8b:b1:09:f5:37:fb:a1:a2:6f:
                    97:70:db:6b:f4:b3:1b:22:fe:0c:4b:98:a4:19:3e:
                    b0:93:74:cf:72:fd:4c:7c:5a:96:d8:f0:04:8a:3b:
                    d4:fb:81:59:03:68:dc:a3:f8:83:c5:7c:8c:b8:b5:
                    34:af:9f:19:f7:05:a8:72:6c:8b:2a:c9:e9:3f:08:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:C3:4B:2F:27:E3:47:16:93:D9:7A:7A:48:77:50:21:92:B2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:dc:f9:a5:e0:8e:19:9b:78:ae:47:69:af:6d:5c:b2:d9:52:
         c2:bb:9b:29:8d:c4:e2:a5:73:8e:ce:99:ea:5d:9b:fb:c0:6b:
         b0:2e:cc:4d:e9:2d:6c:94:20:60:34:c6:a5:b5:85:54:ce:6d:
         52:3a:7b:c7:b9:6e:ba:30:6c:cc:fc:78:4b:ee:63:62:1f:52:
         0c:8b:7f:e2:e2:04:ed:29:35:fc:8a:01:22:f9:e8:e2:76:9b:
         b6:11:6b:5d:91:88:4b:55:c3:25:58:6b:68:e7:61:3a:48:21:
         c5:e3:10:09:72:97:b3:87:b4:70:2f:41:d7:ee:01:2f:ec:b9:
         fc:d6:22:f6:41:2b:e1:77:cb:c0:0e:98:78:15:5f:06:d6:74:
         94:c4:0a:3b:92:4b:65:e7:8a:7c:2d:28:39:c8:59:c8:80:98:
         b5:18:7a:10:e1:28:7b:d2:35:e8:03:5a:24:e6:0a:9e:2f:5e:
         5d:8d:cb:d2:97:80:74:de:1d:d8:05:49:a4:6a:22:28:ec:83:
         cf:47:92:a8:62:18:c9:d7:7b:ad:a1:a9:05:56:c5:5b:c4:cd:
         d6:e5:3e:0c:31:d6:c7:d6:a9:7e:85:91:0d:36:cf:f2:2f:b8:
         15:9d:d3:e5:a6:22:5e:f0:03:3e:cc:38:3f:50:f8:7f:2e:b8:
         d3:1f:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:48 2025 by rpki-client