Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9dadb5-6ec1-3830-9a97-c4b0c6fda0d5.roa
File:                     4d9dadb5-6ec1-3830-9a97-c4b0c6fda0d5.roa (raw, json)
Hash identifier:          /Vuvj8B8hdl9dXUhhSdiFvYkgBN26soO4nz/9pWBphs=
Subject key identifier:   71:C0:78:C8:C6:B3:2D:15:B2:72:17:B4:9A:1B:9C:98:8F:EE:BC:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344CF2CB066B4AF188E2980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9dadb5-6ec1-3830-9a97-c4b0c6fda0d5.roa
Signing time:             Tue 08 Jul 2025 12:37:22 +0000
ROA not before:           Tue 08 Jul 2025 12:37:22 +0000
ROA not after:            Mon 06 Oct 2025 12:37:22 +0000
asID:                     396594
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:cf:2c:b0:66:b4:af:18:8e:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:22 2025 GMT
            Not After : Oct  6 12:37:22 2025 GMT
        Subject: CN=bcf2b746-74b1-4976-8f5f-5cf22fb56d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:0c:a6:53:bc:5f:53:63:2c:1d:ea:e0:07:
                    f9:9d:07:d2:ec:10:f2:b4:d1:73:4d:21:c8:3d:b8:
                    1c:e8:6f:b0:6a:ed:95:e7:f6:4f:1b:5b:fd:0a:05:
                    0d:91:df:7f:28:11:fc:93:7a:c3:61:63:10:1b:d5:
                    cd:ac:16:41:92:6e:3a:ca:82:4c:4f:75:fe:bc:81:
                    62:6d:2c:cd:f5:48:0f:60:d6:e3:60:ca:ee:24:7c:
                    fd:04:b7:21:fe:07:23:72:df:20:c1:81:a5:97:d5:
                    a0:dd:ef:fe:b3:d9:00:38:aa:de:77:05:93:b7:e2:
                    f9:12:ec:e1:fb:81:2b:96:32:a8:a5:39:65:57:26:
                    87:dc:7d:df:cb:60:da:0a:8f:96:31:81:b4:f2:d7:
                    a0:94:f8:8f:65:a3:20:5f:45:fe:d4:95:c6:4e:d8:
                    f9:6d:b5:aa:9d:9c:d5:ea:d3:d5:d6:da:9d:42:df:
                    92:a4:bd:a1:16:5a:9c:5c:ed:0c:cd:0a:cd:bf:6c:
                    af:d6:5f:49:07:e0:ca:d3:1a:58:87:69:d6:77:6f:
                    d9:b6:76:e8:90:7a:44:7e:10:03:c4:8f:0a:1f:ae:
                    8f:a2:06:04:2e:04:2f:b4:81:9e:ef:65:b8:17:2d:
                    31:99:b9:7d:5d:d1:ba:6f:03:64:68:39:cc:d2:ad:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:78:C8:C6:B3:2D:15:B2:72:17:B4:9A:1B:9C:98:8F:EE:BC:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9dadb5-6ec1-3830-9a97-c4b0c6fda0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:3c:38:06:3d:f5:b8:7d:55:74:4f:39:39:27:f3:3f:0e:
         00:99:bd:c2:94:fd:bd:71:05:ff:eb:c7:b4:37:5d:e0:98:8e:
         dd:3b:a9:e4:8a:b6:b7:5d:db:7d:7e:54:de:f8:8f:83:9a:ea:
         f6:59:82:f9:3c:7e:95:78:5b:d0:a9:8c:6f:f3:c5:6b:75:9f:
         c8:21:55:95:4e:35:b5:07:69:f5:a2:3d:4b:8b:51:2b:66:81:
         9a:fb:78:c8:1d:a4:ee:f4:86:99:48:44:34:af:89:a7:f4:63:
         df:bb:79:fa:b6:7e:4a:88:de:0c:27:08:7d:19:b8:e8:f4:e3:
         a4:08:55:c8:d9:64:30:30:2f:b8:db:7d:c7:99:50:54:2a:99:
         7b:01:dc:31:ff:05:0e:93:41:43:e1:6f:b0:ab:0e:ad:5e:2a:
         db:11:7a:0e:2a:f6:af:12:f0:fd:fd:8f:05:d5:80:16:d0:8e:
         00:6a:e5:74:24:7d:08:7d:25:15:a4:82:4e:75:d5:b4:1e:ef:
         8b:f1:d1:36:04:52:5f:d9:00:a1:56:72:c9:63:0f:c6:ff:a4:
         0e:14:51:ab:a0:bc:bb:e0:81:88:8e:55:cf:dd:6a:c9:d6:c2:
         de:11:4a:1d:2a:87:6b:ba:b2:9a:d1:9d:5d:93:e5:2c:74:ee:
         8d:2a:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:40:37 2025 by rpki-client