Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa
File:                     7f857a38-b25b-30fb-876d-64382ae98d9a.roa (raw, json)
Hash identifier:          g/9dMgWwON19JmmlR6UE53Eg2rPI9LIQwlyIlpycsmk=
Subject key identifier:   27:AB:1C:E1:C2:90:51:64:A4:A8:7A:74:C2:94:77:C6:7E:3A:3C:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344D0106282324886298880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa
Signing time:             Tue 08 Jul 2025 12:37:22 +0000
ROA not before:           Tue 08 Jul 2025 12:37:22 +0000
ROA not after:            Mon 06 Oct 2025 12:37:22 +0000
asID:                     36619
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:d0:10:62:82:32:48:86:29:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:22 2025 GMT
            Not After : Oct  6 12:37:22 2025 GMT
        Subject: CN=626c5e85-6833-4cb7-9718-6334d80f888e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:66:72:ee:ba:07:33:d2:8d:df:64:8a:16:
                    7a:e6:40:7e:5a:74:70:62:98:ad:51:d5:1a:4f:de:
                    23:b5:ef:3d:36:2b:c9:b7:ea:88:4b:20:70:0c:f0:
                    c2:0c:be:7a:26:a6:df:d8:4e:37:cd:37:bf:c1:f9:
                    23:4e:40:01:0f:eb:eb:d1:b8:28:25:cc:dc:02:2e:
                    79:6b:1d:b0:f0:69:93:9f:9a:1b:b1:a4:3a:54:f3:
                    53:ae:cc:fd:b4:ff:b1:f3:d9:f4:34:a9:04:06:e7:
                    c8:3b:d3:22:5f:10:0e:76:fc:dd:8a:53:d2:99:ce:
                    07:45:1f:0a:34:06:38:22:3e:6e:fd:ae:bf:50:b2:
                    c5:25:d5:cc:a0:f4:07:a2:d7:09:ca:b1:8c:c5:9b:
                    a8:3e:21:c8:e9:e3:c5:35:6a:f6:4e:5a:11:e5:3c:
                    ba:ff:94:28:1d:5b:b2:70:e7:fc:5b:20:9b:6d:ac:
                    46:43:36:19:ba:bd:9b:f0:c4:80:43:d7:05:0e:53:
                    54:12:36:20:f9:ed:db:13:02:e0:07:3b:b7:68:3a:
                    6a:17:db:13:72:8e:4d:77:bf:21:4f:69:f6:8f:b4:
                    08:ff:a7:6e:e3:57:ba:94:08:bc:c5:66:50:50:1b:
                    c2:8c:6c:d4:f4:ea:5b:e0:c7:0a:00:c0:61:42:dd:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AB:1C:E1:C2:90:51:64:A4:A8:7A:74:C2:94:77:C6:7E:3A:3C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:28:ac:2b:d1:75:74:42:fe:ad:d0:82:48:da:6e:4a:bd:d9:
         f3:03:0b:29:71:42:8e:0a:b4:b9:d1:7c:98:d1:3d:2f:ca:f0:
         92:6d:5a:1c:aa:1b:76:39:81:db:8a:b0:29:fe:be:59:cb:15:
         79:26:66:d3:ad:24:ca:1e:69:3c:59:06:a9:b5:af:77:b7:7a:
         f5:e9:b5:4c:75:f9:c8:a7:43:f6:fe:e3:c9:6b:2c:d6:20:e3:
         00:6e:47:cc:f9:f6:05:06:a9:1a:dc:16:6f:fa:c7:58:7e:95:
         24:4c:02:0d:d7:60:a2:2f:7e:a1:13:9f:89:87:0d:5d:dd:a1:
         12:9a:d1:b4:da:c1:90:99:f7:21:4c:6e:76:07:f3:d8:77:84:
         41:5b:32:ed:09:16:4f:9c:56:3f:9f:b3:c8:60:29:3c:7d:9a:
         c3:0e:c0:90:5f:3c:24:02:04:54:ad:ba:a7:50:58:5c:00:d0:
         7e:9c:aa:8b:a7:73:cd:7c:f6:31:9d:c9:96:6d:e0:ec:ae:0e:
         b4:16:15:07:91:2d:d9:83:45:08:9d:f3:78:b5:03:10:f8:4a:
         6e:f9:ed:ec:19:ca:11:c4:e1:88:ef:82:0e:d1:f6:7f:3d:4c:
         37:4b:73:b8:af:75:86:7c:b2:d9:47:2c:cf:93:3c:2c:24:b8:
         2a:a1:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:12:43 2025 by rpki-client