Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2090b896-9393-39d3-b07d-644cd353e840.roa
File:                     2090b896-9393-39d3-b07d-644cd353e840.roa (raw, json)
Hash identifier:          CpKq91Sh2s51cbnWn+IO6EjxEuspz4jezhA4XymV18o=
Subject key identifier:   FB:5D:A8:94:57:14:6F:1A:29:D4:A3:E7:55:15:54:26:EA:BB:83:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09EC05A8C4036D384BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2090b896-9393-39d3-b07d-644cd353e840.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396561
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9e:c0:5a:8c:40:36:d3:84:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=5dc5c365-160d-437d-bfd6-ccb06cf2ff0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:d8:29:e0:7b:5e:9d:f2:dc:cc:e0:5a:87:
                    0b:94:a5:12:19:3a:fb:46:e6:6c:45:a9:09:65:05:
                    5f:9d:23:e8:d2:a1:b0:c3:86:fb:21:be:69:13:b1:
                    93:ab:17:93:2f:e1:45:18:c4:d5:16:aa:ff:89:72:
                    95:49:a0:b5:82:2f:f0:2c:f7:ff:ff:e4:b4:fc:c6:
                    63:f5:a1:27:d6:36:d1:f1:f2:ea:b3:d8:5b:57:95:
                    e8:c9:34:16:a9:55:94:73:97:b3:fd:f3:d2:cd:42:
                    04:e0:e5:af:71:a4:ab:a7:5c:78:73:e9:82:13:fe:
                    68:d9:35:be:83:d2:69:43:eb:11:2c:02:6d:10:c6:
                    f7:b2:f4:9d:67:c8:0f:a4:09:b6:0b:74:c4:89:33:
                    49:d6:89:e1:81:9f:fb:a0:b3:b0:40:77:74:99:6d:
                    87:e4:f2:d8:f2:32:38:1f:c7:f2:3e:8f:0b:f7:4e:
                    00:26:a8:1c:d5:dc:d4:8e:37:d9:e7:19:c7:64:6b:
                    ad:bd:dc:ca:67:69:d2:0c:75:bc:14:5a:fc:09:b0:
                    6e:f3:0f:f4:7c:fc:ce:97:ea:12:d3:9b:fd:7b:40:
                    60:c6:19:d2:b5:7b:df:3f:68:c3:ce:54:e3:e2:92:
                    c2:31:c5:d2:b6:a0:52:cf:b0:bd:99:cf:8e:ea:1b:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:A8:94:57:14:6F:1A:29:D4:A3:E7:55:15:54:26:EA:BB:83:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2090b896-9393-39d3-b07d-644cd353e840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a9:f4:0c:d0:df:1a:aa:55:85:24:08:0f:d8:ff:65:db:8a:
         a7:24:e9:16:60:cc:a2:41:08:af:85:98:df:ba:45:51:ec:b7:
         a5:d0:11:cb:33:80:76:b4:32:3a:e5:3c:17:49:33:97:da:5f:
         c2:97:84:09:0e:79:72:eb:ba:fb:b7:a5:d3:83:5c:2c:27:a4:
         c0:9d:ad:4d:8a:43:6e:44:f1:63:9b:3c:29:f7:78:c1:e6:f1:
         ec:a3:01:5c:dc:91:17:55:77:ee:d9:bd:02:f8:1e:5b:34:5b:
         e2:05:e4:4d:d2:db:2e:a3:0d:33:2e:b3:89:f0:f3:95:6d:57:
         5b:00:08:39:73:c6:9f:19:f6:b2:e7:1c:c2:a1:78:7a:d6:aa:
         20:56:9e:16:4a:cf:e7:8f:40:9f:ff:56:d9:77:42:60:d8:a6:
         55:f0:30:d9:29:9d:8b:b6:c6:e2:6f:ce:97:31:f9:94:6d:80:
         36:e3:51:f4:24:46:e1:b3:13:4b:55:7f:29:93:99:0f:4f:05:
         ca:14:c5:9b:47:5a:40:4c:a8:b2:a7:9b:dd:77:4c:e3:11:09:
         0c:83:89:0e:2d:51:4f:34:b4:4c:cc:f6:a2:db:b9:ad:1b:4b:
         a6:72:86:a4:48:18:6f:af:22:29:bf:47:dc:3d:56:11:a2:2d:
         2b:dc:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:32 2025 by rpki-client