Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa
File:                     a3861946-2101-371d-b59b-14cbbf461d44.roa (raw, json)
Hash identifier:          /PNqkg3ZjapeDeL6bdITwaHIVyLPfUeK4Q8SIckfjnQ=
Subject key identifier:   DC:96:48:1E:74:49:3F:FE:45:2E:A0:1E:92:96:30:4D:F2:83:2D:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344D25AEF932B48B4DBF8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa
Signing time:             Tue 08 Jul 2025 12:37:23 +0000
ROA not before:           Tue 08 Jul 2025 12:37:23 +0000
ROA not after:            Mon 06 Oct 2025 12:37:23 +0000
asID:                     32651
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:d2:5a:ef:93:2b:48:b4:db:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:23 2025 GMT
            Not After : Oct  6 12:37:23 2025 GMT
        Subject: CN=449a753c-f5ae-4520-b2be-743a0fd44792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:8c:b8:d5:fe:8f:23:d8:73:19:91:0c:cd:
                    c3:86:3f:4f:5b:d2:9a:5c:3c:22:63:0b:70:33:14:
                    46:02:7e:4f:4c:b3:68:a3:2f:37:3a:92:b3:c4:e8:
                    5c:bc:b3:d6:31:24:36:fe:c1:29:ed:14:48:b3:f6:
                    81:5a:80:3e:0a:23:46:f4:82:6c:a4:19:b9:f4:fb:
                    c8:d7:6a:66:4c:40:b1:43:ca:92:c3:9f:f9:48:78:
                    11:6d:90:79:a5:d2:7e:74:25:aa:18:a5:78:a3:77:
                    ef:37:ac:e7:b0:e6:18:ca:c4:c9:0d:cc:92:5b:a3:
                    79:9d:27:76:8d:34:2b:b7:61:12:c5:ef:d5:0b:52:
                    56:dd:65:37:a3:d4:78:31:29:1c:b6:a3:37:df:70:
                    c9:c1:9b:65:db:31:7c:c3:17:0c:5e:2f:78:e7:b3:
                    b0:4e:6d:19:c0:84:96:2d:db:5d:5d:b2:e1:91:55:
                    92:47:9c:43:3f:2b:b5:0a:66:e5:50:47:1a:60:ce:
                    5d:6a:78:91:11:65:0a:90:0e:0c:6b:d8:45:ca:05:
                    ce:28:78:c5:52:59:e9:61:70:c1:ae:3c:43:5a:59:
                    96:4d:b2:8b:0c:e3:7c:6e:75:e9:07:6c:0e:df:ca:
                    3f:24:c1:2f:dd:61:c6:84:82:13:48:d9:c2:83:f7:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:96:48:1E:74:49:3F:FE:45:2E:A0:1E:92:96:30:4D:F2:83:2D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:72:fa:b0:cd:b9:bb:e0:89:60:c7:1f:f1:fd:da:49:a5:56:
         d1:cf:94:7e:ac:5b:6b:4c:04:68:48:c9:49:67:fb:3f:6c:3d:
         80:32:36:77:50:7d:b7:b9:a0:64:4c:69:eb:3b:42:ab:f9:dc:
         ba:8c:ee:6a:82:ec:d1:f2:b4:18:19:1e:e0:64:e2:8a:fa:81:
         19:be:36:68:66:1b:63:58:7c:74:72:0c:2f:ba:cd:c8:56:f9:
         7e:16:ea:cc:ea:ba:6e:3f:09:d2:32:65:6c:8b:63:5c:1a:83:
         f9:7e:30:42:a7:37:b5:36:e0:c5:50:6b:34:a9:9d:8c:c3:0d:
         c7:b1:f4:97:34:10:6a:73:7a:3b:f5:ca:9a:8a:2a:45:eb:dc:
         a9:e2:4c:f7:b2:04:36:17:74:a9:f8:75:2e:a9:b4:de:1b:13:
         9a:29:f9:b9:1c:7f:f8:b2:ed:e7:6f:0c:cf:2e:00:83:be:c7:
         72:91:45:15:90:3c:e7:72:0d:76:5d:35:25:d5:b2:4f:2e:da:
         d1:87:91:b5:b7:ce:0d:29:cd:9f:88:b8:6a:5b:6b:fc:5e:6a:
         1e:97:64:74:a9:48:9b:b9:5c:9c:55:a1:02:25:cb:1d:90:63:
         54:a4:de:9e:3e:46:d9:c0:dd:0d:a8:3b:34:1a:72:8e:cf:2f:
         54:42:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:52:21 2025 by rpki-client