Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce029295-8e92-3171-9f4a-89ab0fb28526.roa
File:                     ce029295-8e92-3171-9f4a-89ab0fb28526.roa (raw, json)
Hash identifier:          tYYRRERCFIuEZwAyT2FJbpT7Zqu7w/yi3C+mL+nC0B0=
Subject key identifier:   1F:7F:CF:E6:36:D8:6A:F4:0F:F7:74:6E:63:0F:CE:1D:94:80:70:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344CDFE33D87DCAE326F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce029295-8e92-3171-9f4a-89ab0fb28526.roa
Signing time:             Tue 08 Jul 2025 12:37:21 +0000
ROA not before:           Tue 08 Jul 2025 12:37:21 +0000
ROA not after:            Mon 06 Oct 2025 12:37:21 +0000
asID:                     396612
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:cd:fe:33:d8:7d:ca:e3:26:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:21 2025 GMT
            Not After : Oct  6 12:37:21 2025 GMT
        Subject: CN=03850da4-f4c6-4921-b7ce-1f5b3e5c0203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:a3:23:b5:e5:fe:3c:18:ef:b4:ad:b9:15:
                    db:0e:48:9d:75:37:b7:8a:bd:af:75:76:9a:27:08:
                    1e:9f:6c:4b:f9:2f:8d:a8:d4:34:43:a1:81:88:8b:
                    42:1a:c4:c8:15:08:ff:27:26:ed:13:51:92:6e:a3:
                    21:23:00:e1:15:9f:c3:4a:20:f2:7f:ca:54:46:22:
                    4b:1e:29:27:9e:3d:bc:ae:e5:2e:e2:dc:06:be:09:
                    d3:80:2b:b5:1a:2c:da:8a:5c:4b:71:d6:7c:12:34:
                    ce:64:4d:d1:ff:11:2e:56:e7:8a:4b:bb:f8:7f:47:
                    7b:a5:1e:48:7a:78:bb:8b:7a:83:2a:96:e1:67:6b:
                    ff:55:80:a9:a3:c3:16:c7:b3:1b:3f:a7:12:af:dd:
                    19:99:cb:9d:c9:be:fa:ba:9e:f1:5c:64:70:2f:b5:
                    59:7f:29:22:3b:71:d3:11:f0:d4:cf:32:df:22:3d:
                    6c:60:f0:06:cf:07:74:b7:36:69:e1:3e:19:a4:6d:
                    78:42:9a:2f:f3:bf:c5:7f:1f:10:90:c2:93:8b:b6:
                    e7:3c:30:01:84:c0:46:63:01:55:9c:e8:f0:2b:31:
                    cb:13:b4:f2:7b:4b:58:31:ce:fa:54:4c:54:95:d1:
                    3f:10:eb:ac:56:7c:4e:20:4f:ca:6d:fd:77:ad:b5:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7F:CF:E6:36:D8:6A:F4:0F:F7:74:6E:63:0F:CE:1D:94:80:70:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce029295-8e92-3171-9f4a-89ab0fb28526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:07:42:aa:73:7b:0a:df:3f:87:72:19:84:94:2f:b7:6c:ac:
         e6:95:ca:4d:49:ef:e9:7c:b1:e5:b1:4c:35:3b:a3:80:2f:71:
         86:7f:68:15:fc:22:32:b3:63:d2:36:8b:a1:82:2d:55:9d:b4:
         5e:9f:c8:a9:b5:3f:d5:39:e4:b2:1b:64:b2:4e:a1:e5:cd:f4:
         19:4c:20:8b:03:70:23:8b:f5:8a:d9:bd:c1:24:4a:ef:77:43:
         56:bd:37:9f:8c:6e:11:ea:fc:b0:03:b6:24:43:1b:bc:f5:ca:
         78:5e:32:b0:34:6b:0d:82:3e:60:f9:fd:ea:9b:7f:78:3d:17:
         69:2c:2f:4f:2c:57:53:98:70:fa:1f:22:c1:4d:7c:0c:64:5e:
         c4:e2:27:20:be:1d:46:ed:6c:24:f9:90:d3:99:76:e3:62:98:
         74:72:b7:43:58:d6:c1:c9:04:7c:3a:37:a4:0b:dd:7f:75:c9:
         85:8b:06:81:9a:a5:06:06:4e:df:3d:02:4c:fe:12:05:76:28:
         f9:0c:3a:6a:e5:49:01:e7:12:1e:ef:6e:2e:f3:7a:9a:a1:9d:
         8b:2d:d8:8d:56:72:77:12:44:f5:3a:1c:e2:c9:5b:43:93:71:
         ba:2e:3c:74:7b:11:d1:72:0b:57:d2:1b:94:e4:55:bc:fe:c9:
         6c:fb:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:12:58 2025 by rpki-client