Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa
File:                     63cfb616-4a8c-30a3-af18-f7b834a992d1.roa (raw, json)
Hash identifier:          A7hF4akLFKyxtk5cyiqk2TOZsAdTEnnzGRUbOgEqtbY=
Subject key identifier:   C5:48:E9:B2:79:CC:34:2F:2B:F6:31:E5:E5:43:D8:B7:D9:84:59:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344D000A9BF8E7A814DB100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa
Signing time:             Tue 08 Jul 2025 12:37:22 +0000
ROA not before:           Tue 08 Jul 2025 12:37:22 +0000
ROA not after:            Mon 06 Oct 2025 12:37:22 +0000
asID:                     397199
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:d0:00:a9:bf:8e:7a:81:4d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:22 2025 GMT
            Not After : Oct  6 12:37:22 2025 GMT
        Subject: CN=c9974677-93c9-4999-94d3-ccfda724423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:ea:9e:aa:85:29:34:d7:3d:ee:a1:ee:9d:
                    81:1f:4e:67:fd:82:16:43:70:92:c1:7d:55:63:e0:
                    7a:b1:8f:c2:11:ec:85:7a:09:91:d9:2f:6e:ab:6e:
                    a5:91:93:5a:a3:b8:ee:80:3b:f8:55:98:f3:b0:20:
                    50:f0:dc:bb:0b:08:61:de:41:b3:f0:b2:1d:62:12:
                    a4:da:a6:2a:e4:0d:99:a8:a2:c2:43:b2:65:9e:cc:
                    97:7c:ec:97:b1:c8:5a:1f:80:a7:cc:ea:5b:ec:51:
                    ef:b4:0f:b9:35:e7:55:30:0d:fc:20:d6:00:02:38:
                    14:53:ee:04:31:d5:b3:be:5d:a1:02:02:5e:72:2a:
                    e6:43:05:9d:61:ce:ea:2a:7a:a5:69:bc:88:69:4a:
                    98:57:57:38:23:94:44:64:b0:f5:c8:1a:9f:5d:89:
                    34:dd:f1:fd:45:f2:a3:84:ec:3c:37:ed:b8:b9:7c:
                    30:3d:72:7b:ba:be:41:5e:39:7c:3d:ab:8d:f8:6b:
                    22:c3:81:e4:6e:68:b0:24:a2:c3:f5:50:67:4e:f3:
                    5d:35:ce:28:89:af:cb:49:98:55:b1:06:47:0c:e7:
                    bd:40:0b:54:fe:3a:3b:05:f9:bb:76:54:da:ec:f8:
                    c6:f9:90:8a:96:7b:41:75:60:7e:bf:eb:77:d0:d4:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:E9:B2:79:CC:34:2F:2B:F6:31:E5:E5:43:D8:B7:D9:84:59:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:65:9a:4c:f4:fd:fc:82:98:d2:f4:b6:ef:92:00:a4:c8:
         19:d5:0e:80:7c:0c:32:f9:aa:5f:a9:d9:ca:4b:58:60:1b:d1:
         00:89:06:76:81:93:6b:c8:90:c1:59:07:c2:c6:d5:c8:ac:c3:
         01:58:1a:14:c3:ca:c1:56:4a:d8:3f:42:2f:e7:be:f2:6d:3b:
         1e:40:ba:1b:7e:b3:6f:a2:7b:07:52:fe:8f:16:a2:c3:f4:fb:
         15:c0:a6:6c:c1:c5:f2:19:d8:36:0a:3b:63:a7:28:8c:87:0c:
         d6:fb:d8:27:8e:47:72:16:a5:4a:6c:f9:fe:c2:8f:b0:7d:3e:
         fa:9e:52:cf:7a:db:1d:e0:db:22:73:27:bb:e0:01:c6:fa:e2:
         15:84:75:8e:17:7c:ab:b5:35:5a:c0:fe:fb:32:9f:79:c5:4c:
         e2:68:26:e3:36:fd:6c:15:8d:0b:fd:c4:8d:ae:76:92:3b:32:
         64:74:91:4b:87:1b:7b:71:03:63:db:c6:15:ab:0e:ee:10:c5:
         eb:c0:39:64:a1:1c:91:51:67:4b:9f:3a:0c:4b:fc:2a:01:cc:
         6b:1d:db:77:d0:6c:6b:5e:96:bd:eb:c3:3c:38:5e:65:2e:da:
         93:18:d8:aa:0d:12:34:00:61:d9:fb:ff:25:4d:1f:45:76:81:
         dd:f5:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:24:43 2025 by rpki-client