Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46df0284-89a4-3fc2-8a75-07e52c2a534f.roa
File:                     46df0284-89a4-3fc2-8a75-07e52c2a534f.roa (raw, json)
Hash identifier:          mLAZSbtLN+U2+qK0DMkKO+aBCaaX5f4rWOn+fS4bvfc=
Subject key identifier:   19:3E:FD:BE:CF:7B:99:45:A9:AA:21:59:6E:72:6B:FC:B8:26:5B:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B81D0C2CED70D44100E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46df0284-89a4-3fc2-8a75-07e52c2a534f.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396565
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:81:d0:c2:ce:d7:0d:44:10:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=a5a52af0-ad2a-4451-9491-a6eaeabb085b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:a3:02:00:93:35:07:3d:d4:3a:a6:a7:16:
                    02:b2:11:f1:3a:86:ea:6b:8a:6f:cf:c8:49:9a:0f:
                    c7:c9:bb:2c:cb:2c:16:4a:76:11:bf:40:9f:fc:13:
                    03:1f:49:3d:c7:c7:b8:2c:da:d7:58:74:04:31:fa:
                    43:cb:1b:6e:be:bb:8f:06:23:10:5c:1b:09:34:82:
                    fc:31:51:80:48:7d:37:9a:3c:74:6f:69:53:19:d4:
                    43:ea:4a:f1:29:b3:86:46:a3:c5:c9:f3:a6:30:69:
                    a5:6f:08:e3:ed:46:54:7c:e7:08:c5:9d:33:de:d6:
                    ad:44:14:54:d2:5a:a0:bf:86:83:cb:2c:f9:05:93:
                    e8:68:f0:06:85:c6:d2:14:98:67:43:ce:ab:73:26:
                    73:b3:67:53:57:09:74:02:5e:d1:38:0d:e0:3e:8d:
                    d2:35:51:2a:80:df:41:61:e0:7d:4b:43:45:51:f9:
                    9c:16:19:0b:8b:24:80:eb:c4:36:d6:73:61:86:59:
                    2a:69:a7:a8:f7:eb:6a:92:13:ca:3e:4a:0c:78:01:
                    ec:0a:fc:fe:e6:fe:2a:d4:5c:a9:14:9d:eb:6e:d5:
                    f7:61:8d:44:e8:d4:36:b0:ea:fb:f1:eb:b5:ba:cb:
                    ed:9f:9e:45:c7:f4:a7:f3:ea:31:51:5c:ec:7f:72:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:FD:BE:CF:7B:99:45:A9:AA:21:59:6E:72:6B:FC:B8:26:5B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46df0284-89a4-3fc2-8a75-07e52c2a534f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:46:01:6e:6f:52:ff:73:d0:00:a0:32:ad:cb:ec:ee:b5:55:
         21:57:3c:fb:47:88:b0:95:64:e1:81:92:6e:62:ad:14:21:8d:
         13:8b:d7:f6:7f:4a:21:dd:5d:a8:6f:b5:2a:d9:49:57:35:79:
         2d:70:b8:48:5d:3d:f8:75:a6:d2:a0:7d:fc:2c:73:c4:ac:8d:
         cb:80:b8:68:23:7d:a7:9a:54:e1:2e:a6:7a:37:f0:d7:b3:d5:
         d9:5e:5d:a6:f8:3c:51:da:d1:39:e8:57:54:64:00:20:8e:21:
         e3:d0:ab:5c:12:2d:7d:f5:69:3b:6f:50:c5:06:6e:1b:08:cc:
         09:a3:2e:12:c0:78:43:31:01:83:18:23:0e:a3:46:13:12:bc:
         07:8b:00:25:b9:85:13:56:a8:42:27:e0:61:40:37:0a:df:87:
         ad:8c:80:59:a2:ee:81:f6:1b:84:fb:09:e2:18:78:50:dd:e6:
         eb:82:f3:24:4a:cc:5a:74:0e:66:aa:b7:ef:cc:d9:3f:1c:ba:
         0a:a7:8f:b5:69:b4:39:66:61:9d:3b:e1:ac:ca:67:55:81:81:
         8c:e8:2e:83:26:b9:bf:d3:e5:57:0e:ee:52:4d:fe:a7:97:ed:
         6c:70:5b:24:82:f7:db:82:69:55:75:61:96:16:a9:68:48:0b:
         6b:9c:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:39 2025 by rpki-client