Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa
File:                     16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa (raw, json)
Hash identifier:          LHjrt9gOcNJeA5V7MwBFwVi/w9ok5g9+jZFfi+T0Uek=
Subject key identifier:   CC:9A:12:2F:65:C6:14:4E:C5:E9:9C:FE:C1:C4:E0:B2:4F:13:56:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09E561355D16383B0A340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396555
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9e:56:13:55:d1:63:83:b0:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=59ed58f6-cab0-4b1f-a2b9-8f342cf6fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:35:2f:96:c6:87:5b:ed:6b:49:c9:e2:d5:
                    d3:32:d6:00:d5:9b:d3:58:ed:cf:b0:46:90:77:d8:
                    38:a2:cf:3d:b3:75:b4:ae:91:43:dd:ab:ad:d3:60:
                    de:69:2f:8d:f1:ae:63:2c:87:b4:a7:af:5f:80:c1:
                    4c:48:ef:9a:8b:0b:1b:e1:66:4d:bf:f9:9e:9c:17:
                    d3:d3:34:61:f2:c2:a2:08:49:0f:6c:73:d7:20:5b:
                    51:17:91:ea:66:6f:b8:5b:16:d9:eb:c6:bb:b9:7f:
                    41:78:98:3d:e4:11:d0:7f:d8:2d:94:e1:43:5f:6d:
                    64:af:23:f2:aa:3d:97:cd:df:17:0e:ad:14:59:0e:
                    c0:89:72:b0:d9:42:91:c0:b5:63:ca:94:b0:04:3a:
                    f6:0e:fe:c7:60:65:2f:8d:09:54:4e:5a:21:e1:09:
                    82:e9:0e:56:f6:7a:83:d2:d2:7c:e1:1d:ce:cf:58:
                    ce:22:8b:09:aa:c2:12:6a:c4:bc:11:2c:c3:95:1e:
                    57:29:83:7f:33:77:c7:15:25:e8:7f:46:21:7e:ff:
                    69:97:a5:3d:7f:b2:43:27:16:ee:f6:2c:f7:7e:b5:
                    f0:04:dd:5b:c3:f1:c0:7d:ee:3f:b5:d5:1e:db:4b:
                    1f:84:80:0d:21:fb:8d:90:53:40:d4:52:31:15:fd:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9A:12:2F:65:C6:14:4E:C5:E9:9C:FE:C1:C4:E0:B2:4F:13:56:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:df:17:c8:67:b4:14:35:4f:b9:89:8b:e6:c6:da:c1:a2:e6:
         09:93:c2:a4:fb:c6:87:84:cf:48:8d:1b:75:60:e9:b9:d5:a1:
         6d:1e:21:a0:2f:f6:43:8a:f6:72:a4:ec:0e:3f:66:7f:0d:fd:
         f8:cb:d2:5a:91:a5:95:7b:40:ff:d3:f4:a8:12:45:a4:de:3b:
         4d:89:cf:a1:10:7a:60:36:2c:6e:37:a3:4f:7a:40:88:ef:1b:
         41:6e:ad:91:77:51:ec:13:78:0d:99:c0:56:b3:d5:8c:89:bc:
         93:29:4e:15:8f:64:74:97:26:10:24:b0:e7:0c:69:c4:be:42:
         f5:47:09:0f:a3:ab:5d:77:33:15:19:55:a7:ef:ff:5e:4f:9b:
         e2:e3:b0:c6:40:be:68:98:2c:1f:56:fa:51:64:9a:2b:85:0e:
         6a:41:09:ac:90:ed:fb:99:c8:ae:52:4b:40:61:68:95:bb:d2:
         1d:8e:5a:96:4e:6d:3b:21:fd:0e:a1:58:08:ee:01:2c:bd:1c:
         be:1d:a3:4d:0f:5c:58:fc:fc:7d:78:a2:96:12:c5:1b:8b:40:
         73:97:93:42:60:ce:e9:dc:06:16:da:fc:1c:23:6f:b9:d3:db:
         fd:8c:6e:ae:30:5a:c4:f4:1b:e6:55:65:bb:5c:24:59:d6:af:
         6f:e6:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:54 2025 by rpki-client