Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa
File:                     4169b638-0baf-36ac-8fff-b08b0dc08134.roa (raw, json)
Hash identifier:          PQPy61AY2zQPk4eEdpPc0KDImlnYUQHKnQxIMqnPslM=
Subject key identifier:   7C:58:0E:E0:28:FD:77:C8:B6:69:B9:AF:4B:78:4A:14:34:3D:13:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6072EF0054DDAD8A6B1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396827
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:07:2e:f0:05:4d:da:d8:a6:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=5eb2cd5a-8e6b-4d78-aab2-44396cc72312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:e4:70:22:7d:8a:52:72:49:ae:94:74:d0:
                    18:e1:03:d3:22:ca:28:d1:3e:75:a1:f4:14:0c:09:
                    08:a0:15:ef:b2:0c:98:90:94:67:42:16:3c:d9:ac:
                    08:5f:73:b9:13:4d:8f:ae:43:48:7e:c3:54:f0:76:
                    b2:f8:1e:6e:80:be:f3:22:18:87:6a:0c:73:8d:e5:
                    ab:46:dc:68:7c:5b:45:f0:53:a4:76:ac:c3:9d:a6:
                    14:7b:84:05:a9:6b:03:bf:65:23:87:c0:6d:54:35:
                    aa:52:97:7e:75:66:89:a7:f0:45:ce:9d:97:f5:08:
                    c2:b6:bf:97:69:5b:2d:48:27:f3:c0:a2:e1:c4:49:
                    ad:f9:0c:e8:0b:96:6a:6c:fb:78:4e:d8:8b:21:36:
                    45:fc:48:fd:8f:99:f4:c2:93:ec:19:90:52:c7:73:
                    67:e9:9f:2c:55:d9:fb:8b:cf:f4:3f:be:c7:ef:64:
                    b6:57:2b:ee:2e:86:ce:dd:0c:a0:da:2e:a2:d2:85:
                    98:11:0a:37:e1:96:ca:f8:8a:d0:55:4a:39:4c:52:
                    0b:a1:a9:5c:8b:fb:20:21:5b:03:3c:75:73:02:d0:
                    71:de:f8:d1:bd:f6:20:09:81:16:d0:d4:92:87:0b:
                    8e:f7:8d:14:5b:9e:14:c4:5c:8e:2d:d2:65:5e:f0:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:0E:E0:28:FD:77:C8:B6:69:B9:AF:4B:78:4A:14:34:3D:13:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:f5:79:4e:1f:5a:30:b9:3e:f0:d6:84:2b:a2:4d:34:54:
         2d:2d:69:1b:02:3b:58:64:12:af:b8:64:eb:b2:fe:96:5e:8e:
         37:6c:98:fa:c8:ea:0f:84:6c:3e:81:22:5e:74:ef:a7:cf:4c:
         34:9a:7b:2f:e6:3f:7d:f9:bf:c4:97:3f:13:f1:35:f8:ab:3b:
         73:b4:0a:4a:f6:83:57:83:89:82:75:18:28:8f:92:59:4a:ef:
         f7:7e:b7:52:af:27:c5:a2:b4:ed:a4:d9:53:18:57:e2:27:ba:
         f6:f0:5a:91:29:5f:26:ee:ce:f4:5c:f4:88:a6:55:d7:12:44:
         c6:6b:68:c7:cf:fc:14:ce:12:a4:03:c7:ff:e7:d9:44:83:fb:
         69:4e:e2:45:a8:0c:bd:64:46:3e:e4:40:bf:d5:3e:71:4e:cc:
         11:9e:e7:76:8c:ca:56:d5:01:1e:ef:13:60:2a:b5:1e:13:b4:
         f6:2a:9d:f2:a6:6b:68:f4:d0:0f:9a:fb:ae:b9:16:83:0b:a7:
         91:28:d5:bf:81:8b:d6:95:6d:94:9e:60:1b:59:c0:8e:b7:ab:
         48:70:8b:a4:71:f6:58:08:9e:82:93:dd:d9:76:97:98:e8:3f:
         db:69:f9:74:62:d5:2d:ee:f4:9f:bc:f3:e0:1e:13:b2:bb:eb:
         89:5a:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:34:14 2025 by rpki-client