Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa
File:                     05870cd4-736c-3480-ae35-44660e7730a2.roa (raw, json)
Hash identifier:          M57x/6FSmpFJNHhLsfdje2fofIDU0ZrBLc6v+6w+2AE=
Subject key identifier:   74:17:8D:34:85:45:EA:76:3E:20:76:FC:30:43:FF:CB:7A:D0:DB:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09D749400FBCCE5D59D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     36616
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9d:74:94:00:fb:cc:e5:d5:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=d79cd169-e9f3-4f27-a3ec-1b562992a0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:81:52:ac:08:c8:2a:35:23:3e:8b:cf:93:
                    19:ba:56:e1:1c:77:8f:85:99:55:59:15:15:cc:d2:
                    77:a5:cc:77:d0:9f:a6:9e:89:9a:d5:77:78:7c:c4:
                    a0:d4:a8:30:8c:3f:0e:ca:34:14:aa:40:06:2c:ab:
                    a9:ca:c5:54:bc:35:7d:6e:86:71:35:5c:a8:63:f1:
                    02:95:7b:6f:05:ff:68:fd:31:42:58:af:82:55:a1:
                    e5:cc:e4:ee:b2:67:a0:35:3c:54:41:cf:bc:c0:0b:
                    5a:42:a3:88:09:04:16:63:8c:bc:1a:04:b4:e0:82:
                    c0:80:27:97:12:c1:76:7c:52:97:06:cb:c4:f3:05:
                    1b:e1:3d:dd:29:35:80:af:ff:ae:3c:1f:c6:99:a5:
                    81:50:f8:39:94:35:f9:93:3b:6a:5d:dc:a0:4c:8a:
                    28:f7:35:0d:ba:6c:5e:73:8c:19:be:eb:93:2e:5f:
                    5f:7f:7c:8a:cd:65:18:56:fa:98:e1:93:47:92:9e:
                    19:cf:79:c2:48:0e:f2:55:33:03:8d:81:2a:5e:9f:
                    ff:b0:b4:30:e0:ef:83:0b:24:9e:26:98:c4:85:b1:
                    e9:d5:18:82:64:bb:75:b8:46:25:e4:88:1d:fa:e7:
                    92:12:5a:a5:2c:80:56:47:e4:6f:85:09:d6:0c:b8:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:8D:34:85:45:EA:76:3E:20:76:FC:30:43:FF:CB:7A:D0:DB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:fb:4d:8a:5d:b5:d7:f9:c8:80:68:06:5e:da:41:4b:44:
         15:fe:7f:18:58:d9:62:32:2d:21:b6:e5:a7:81:c7:14:0c:e2:
         86:e0:b2:b0:eb:2a:03:4b:f3:41:2c:6d:d6:33:42:6a:6b:4a:
         6d:e9:85:a6:b9:56:77:69:4a:47:37:cd:5c:4e:bc:c8:ad:c8:
         63:ca:61:e7:82:8f:b8:ee:cb:03:a4:5a:11:62:b3:55:76:79:
         8c:25:3d:3a:f8:02:96:12:1b:8e:c5:12:ee:5a:b4:06:9b:41:
         9a:98:03:11:21:07:2b:1a:50:ba:fc:77:22:53:32:34:49:eb:
         94:8a:8c:42:21:a7:1d:02:60:d6:e4:ea:81:0e:f5:76:14:2e:
         40:ab:3e:b2:d1:a6:2a:49:43:1b:40:cd:8e:a7:18:14:ea:5a:
         4d:8c:9c:4f:e5:be:c3:7d:88:63:1c:28:8b:50:bb:53:60:b2:
         2f:5e:b6:d5:b1:56:c1:ee:d4:ca:53:f0:b4:21:db:fc:17:cd:
         0a:77:ef:43:bc:ca:41:75:41:0b:3a:ba:1b:6c:5b:f6:ca:e8:
         59:6a:82:29:ae:d3:e4:d9:61:cd:15:7d:d3:41:48:e6:64:87:
         61:ce:05:6f:85:c7:c1:0e:10:13:3d:20:24:a6:d6:4a:a1:cf:
         b1:2d:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:36 2025 by rpki-client