Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63f1466-434f-38c2-90e2-4dd2be4ed600.roa
File:                     f63f1466-434f-38c2-90e2-4dd2be4ed600.roa (raw, json)
Hash identifier:          OvUVFp5bKqrYXyCFcoTWjGpfQVY7DRXr6oitQsRmL/k=
Subject key identifier:   89:B4:40:F5:81:95:A4:80:8A:2D:92:E2:67:99:12:84:6C:8F:DA:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344D484F3FAD1894F448980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63f1466-434f-38c2-90e2-4dd2be4ed600.roa
Signing time:             Tue 08 Jul 2025 12:37:24 +0000
ROA not before:           Tue 08 Jul 2025 12:37:24 +0000
ROA not after:            Mon 06 Oct 2025 12:37:24 +0000
asID:                     397203
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:d4:84:f3:fa:d1:89:4f:44:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:24 2025 GMT
            Not After : Oct  6 12:37:24 2025 GMT
        Subject: CN=8b8ef883-5040-41dd-8332-7c9a510fc957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:e1:19:13:c0:60:80:2c:5c:81:cd:cf:24:
                    5a:3e:c4:4f:3e:a0:ca:53:ef:d7:0d:42:f8:fb:8c:
                    74:37:3a:9e:45:72:a9:e7:d8:55:a4:e9:b2:3a:89:
                    5a:d1:a0:c8:ba:ae:11:00:b8:ce:17:3b:14:dc:a0:
                    b0:8c:d3:12:9a:44:86:21:b7:89:e8:f6:e6:d0:17:
                    b4:27:7b:90:53:cb:84:32:e9:00:6e:55:b7:65:9e:
                    2e:2b:4b:0e:a7:32:5f:18:44:be:97:66:d4:d6:0f:
                    f4:24:71:cc:af:ad:3f:3b:79:8d:8f:29:28:b4:f2:
                    50:ad:50:23:10:0f:dc:6c:4e:10:71:09:d2:9e:f8:
                    db:d6:5e:28:32:df:af:80:d1:97:00:93:b6:58:92:
                    57:40:98:f4:ab:78:bc:ef:8e:21:e0:41:83:a2:69:
                    e4:11:e6:77:6c:a4:af:84:9d:ec:f5:05:b2:26:12:
                    e2:8c:f0:be:74:36:45:97:25:ea:ab:7f:14:79:26:
                    cc:76:9c:ab:cf:46:49:e8:96:20:25:87:78:e1:4b:
                    e3:c1:13:c4:f8:25:6a:03:28:cd:44:98:33:a5:e4:
                    e6:da:0e:3f:8f:75:51:bb:56:35:af:3b:85:e5:c2:
                    bd:34:08:62:6a:37:46:0a:f7:08:9a:4e:0c:5f:04:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B4:40:F5:81:95:A4:80:8A:2D:92:E2:67:99:12:84:6C:8F:DA:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63f1466-434f-38c2-90e2-4dd2be4ed600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:9b:ae:c7:99:7d:63:97:6a:32:9f:77:2c:6d:ca:71:78:
         69:d8:86:0f:2d:0e:70:3e:aa:e9:85:8a:92:94:43:3a:44:54:
         d2:88:7a:2e:18:a6:bd:ce:9c:7b:c3:d9:7d:14:6d:04:1c:a1:
         1e:52:f9:27:1d:a3:b4:08:85:e5:e0:73:0d:9d:53:94:80:5f:
         d9:6a:03:8e:b1:9a:2b:2a:21:15:b2:87:85:d2:4f:fe:c9:0f:
         27:8d:4b:bf:86:8c:56:b5:b5:3a:b1:45:0b:0a:e9:b1:98:69:
         cb:de:de:47:b8:17:61:22:02:79:28:d9:75:4a:33:6e:4e:29:
         92:57:93:30:13:ca:0b:e5:db:19:ba:0e:f7:82:e0:e2:18:75:
         6d:91:2f:77:33:be:ad:f3:4a:65:5a:ab:2a:a2:f6:d0:5f:e2:
         5a:63:b0:f7:5c:8d:96:69:b5:b7:bb:93:ba:1f:40:e2:99:78:
         ae:e8:3b:d7:4c:1f:86:bb:33:28:3b:e9:60:73:eb:1f:bf:29:
         81:82:08:c6:99:37:88:40:a0:ba:90:93:b1:e3:3f:f7:75:53:
         56:d3:f5:6f:a0:12:6a:45:fc:50:68:53:b4:58:0e:b9:ba:7a:
         18:a2:68:c6:dd:3f:f9:e8:87:ff:c5:0f:68:55:6c:55:dc:d7:
         f7:63:dd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:46:32 2025 by rpki-client