Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa
File:                     14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa (raw, json)
Hash identifier:          NLi3XP6ts688dEbEKB9y3USW6dMBRfYjJdUsPa5TBFY=
Subject key identifier:   E1:F5:55:7C:E3:B6:FB:1C:1B:60:38:5E:93:F4:F0:CA:91:0F:E6:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E60918737896FC50F84D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     397197
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:09:18:73:78:96:fc:50:f8:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=2459e219-093c-4da7-8823-12de1017220d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:57:70:94:19:a2:fd:4f:a1:52:9d:4c:d9:
                    5a:6f:ac:b2:7c:f3:b3:e0:f9:46:3c:8a:c5:07:1f:
                    40:e2:53:3a:e2:35:8f:0f:25:3e:c6:20:4c:0f:9f:
                    76:63:05:f5:04:b9:9b:5a:7b:08:48:23:30:03:2c:
                    97:1d:1e:af:ea:47:bc:f9:c8:d7:34:d8:81:7c:40:
                    b9:75:ce:96:ea:87:63:ea:ad:88:46:af:13:27:cd:
                    eb:cc:39:d9:e1:f7:5d:d4:67:67:31:0c:31:46:67:
                    95:af:11:f3:db:9c:ac:58:50:f7:5f:73:bc:52:80:
                    51:2e:04:ae:77:78:ba:b2:15:7d:71:5d:c2:1e:2c:
                    11:6e:ff:d1:09:cd:67:b8:d6:d6:1c:52:53:68:3b:
                    eb:56:00:30:04:c3:f3:53:84:dc:3b:85:c4:c5:da:
                    d2:fb:ac:bd:0b:e4:d4:21:16:1b:81:eb:20:bd:f1:
                    c9:4a:f1:d6:e5:af:74:70:9a:56:6d:f2:3b:51:5a:
                    c7:00:8c:1e:39:c6:1b:2e:e9:a0:7c:fc:fa:cc:62:
                    e7:7b:15:8a:d3:7c:b0:0e:67:95:77:17:31:ba:1f:
                    4a:01:13:6a:a1:3e:93:67:fc:cc:0c:4a:4a:b5:0c:
                    aa:78:62:8a:61:d7:ff:ff:f5:3d:a1:f8:09:5a:85:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F5:55:7C:E3:B6:FB:1C:1B:60:38:5E:93:F4:F0:CA:91:0F:E6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14ac8a96-fefd-39de-8e8c-60e1c009db5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:df:37:56:bc:c1:5b:67:70:c2:fa:05:dd:92:ad:a5:25:
         62:4d:76:bf:40:5a:e0:c2:f4:e5:9f:ca:30:23:bb:2f:21:e4:
         49:e2:b9:1d:19:9c:95:a3:67:40:cf:ac:b0:5e:3f:26:62:30:
         90:98:88:36:f2:68:68:c8:c5:a3:71:f5:e3:c9:b0:f9:0d:39:
         e3:88:67:c0:46:cc:73:4f:b7:e9:6a:f6:a3:f7:16:c4:f8:2e:
         26:4d:e0:5e:39:6d:82:06:7a:d0:6c:30:b4:9d:52:45:45:a4:
         d5:11:31:6b:b1:85:f0:79:eb:ec:14:29:60:65:82:e6:65:10:
         6f:56:0b:28:4e:31:c2:ee:eb:5e:a3:87:4b:8d:86:7b:92:b7:
         63:51:b9:70:5e:76:37:17:0b:70:03:d3:97:42:ec:d5:9e:54:
         1f:01:ba:65:56:4c:65:6f:a0:bc:be:8b:1e:f9:b4:db:87:85:
         c6:43:33:4e:9f:73:b3:47:04:83:20:e9:53:67:cd:25:de:de:
         29:2c:dc:a4:66:84:22:82:3b:6e:4a:d3:3b:1a:f7:f1:ec:88:
         eb:6a:28:cc:cf:3f:f7:32:7a:3a:5d:76:01:3d:0f:53:d9:46:
         3f:52:eb:34:cc:c0:90:ba:03:e2:b3:d0:6d:1b:30:c4:b2:eb:
         40:20:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:51 2025 by rpki-client