Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa
File:                     664aa377-6711-3b1f-ac8c-42a4365b5336.roa (raw, json)
Hash identifier:          beYXDifd5jLyZGBgp/knyEpccHSj5GCBm8SVaLqos+M=
Subject key identifier:   A1:15:28:18:99:D2:BC:34:04:AE:5A:F3:80:92:22:23:A6:A9:D2:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF686982E459AB27993D310F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     396616
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:98:2e:45:9a:b2:79:93:d3:10:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=6c15715b-b814-4adc-afc7-0e78d17166db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:b4:e1:f5:83:49:e1:5e:11:1e:bd:ac:38:
                    3e:3e:e5:9b:f2:d1:af:74:f2:15:75:cf:78:fd:5d:
                    8d:5e:64:58:49:b4:c4:e4:7c:bb:71:a2:35:73:5f:
                    65:8b:4b:e5:c9:08:52:c3:ce:5d:19:91:4c:cc:c1:
                    ea:4a:0e:be:ef:01:c3:43:bb:4b:fe:b4:61:fc:96:
                    b3:d2:6c:b0:a1:fe:fb:77:a2:c2:7c:d1:51:67:02:
                    75:3b:86:22:f3:f8:ec:bc:54:e1:aa:01:f4:37:60:
                    93:30:6d:ac:b7:18:74:4a:25:3f:09:b4:45:b5:32:
                    00:32:72:8a:f9:ee:6c:3a:36:e8:e6:88:08:4f:32:
                    98:65:13:00:18:35:be:14:5f:67:91:66:e2:5a:c1:
                    b3:bf:a9:43:45:5e:15:b5:a5:52:f9:d8:8b:a5:a5:
                    5c:f1:72:d2:2a:78:2b:89:14:20:1d:de:eb:07:89:
                    a9:de:76:0b:f1:ac:62:01:f2:aa:3f:56:8a:2f:46:
                    2d:d0:c9:6d:97:d2:f1:28:13:08:14:57:46:da:dd:
                    36:e6:1c:16:59:43:bb:53:15:6c:36:85:01:e6:53:
                    fa:99:d6:a7:a9:29:5b:40:73:19:88:ea:af:e8:14:
                    28:0d:23:71:50:ce:12:66:60:3a:18:78:98:d4:17:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:28:18:99:D2:BC:34:04:AE:5A:F3:80:92:22:23:A6:A9:D2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:28:22:0c:d6:b0:49:5e:91:90:e3:da:7f:07:67:05:69:01:
         5e:fe:da:0d:f0:94:56:56:ee:e3:0e:45:35:79:55:fe:7b:b9:
         80:c6:4e:33:d2:d4:33:88:0b:03:00:14:c1:8f:8a:e8:67:1d:
         8d:b3:db:01:1f:55:0b:fb:41:35:f4:4d:87:98:ac:ef:21:4c:
         92:70:0e:b8:3e:fa:0c:5a:98:66:8d:8b:2b:74:d3:8d:98:27:
         0f:d5:03:76:48:e7:b3:b4:6e:08:25:9e:9d:37:3e:1b:95:44:
         f5:d1:a6:36:4a:89:6e:0f:46:69:e1:94:76:b6:d0:16:ee:3b:
         ed:ad:cb:e0:7f:a5:5f:c6:0f:51:b4:18:84:24:a2:4c:db:51:
         fc:d9:2f:f5:2a:ea:f6:90:2b:03:e4:7f:1e:0d:a7:c1:eb:19:
         02:68:66:55:07:d8:61:64:3d:3c:6f:0e:2b:7a:18:7e:87:19:
         8c:d7:ca:20:e6:b5:8e:94:ed:08:36:7e:64:97:03:17:b0:88:
         c8:b0:f9:f9:fa:30:f2:77:47:7a:a8:52:72:7b:b7:b2:48:8b:
         e0:35:95:8e:97:8b:8b:2c:72:bd:80:d0:5d:87:e9:a4:3f:38:
         7e:59:38:a5:c7:56:82:a3:13:32:8b:4d:9c:0c:c8:60:4a:17:
         31:e7:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:27:57 2025 by rpki-client