Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5276baf8-1fe6-3687-b0a7-8f03bdbdb032.roa
File:                     5276baf8-1fe6-3687-b0a7-8f03bdbdb032.roa (raw, json)
Hash identifier:          NGnvEptnysYUG9GXYFIVYME41nV8jPJZtKVhtVKwhMc=
Subject key identifier:   20:AB:D7:18:2B:66:40:33:28:97:E0:F4:9F:81:2B:8B:C9:31:BA:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6088D25D9C54374847800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5276baf8-1fe6-3687-b0a7-8f03bdbdb032.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396547
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:08:8d:25:d9:c5:43:74:84:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=c555e250-88e8-4691-b856-b4e611d43756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:da:bc:e4:cc:ee:2f:ec:6c:5a:ab:bb:68:
                    c5:e6:ea:e9:12:27:e2:4f:c7:cb:a9:a6:63:28:35:
                    ef:95:98:8a:26:62:46:0c:58:b0:68:55:a0:ce:95:
                    2f:e3:82:3e:71:1e:12:1b:fb:00:69:52:c1:85:08:
                    9d:e5:c7:0e:48:56:cf:f2:35:28:4e:a6:06:89:2e:
                    bb:64:90:2a:a7:7c:61:bb:b5:f9:a6:70:0b:2f:38:
                    32:8a:95:ce:b6:80:53:27:95:ca:1d:e0:25:bf:09:
                    b4:28:ed:de:4d:1e:16:fe:eb:a2:3d:31:0a:b5:a8:
                    6b:ff:9d:a2:ba:0b:11:0f:f1:fc:5a:50:29:63:1d:
                    85:44:d7:e7:6d:68:7d:ae:9e:64:60:33:41:6b:eb:
                    22:d0:4b:05:a9:5b:94:1b:47:18:d0:8c:97:cf:1a:
                    64:4f:4b:44:16:49:c9:04:a3:c9:34:d9:8e:7f:66:
                    5e:79:dd:2b:ba:41:45:52:6c:16:43:4e:69:5d:3c:
                    b3:26:8e:85:0e:3d:28:80:1c:4b:19:b9:40:d7:89:
                    e6:0d:01:72:e3:e5:de:02:bd:ff:d9:fe:00:a4:1f:
                    60:77:19:22:d8:47:b2:f6:05:ed:46:20:a9:42:c3:
                    89:d0:2e:4b:36:25:a8:a9:84:56:54:ad:e7:29:87:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:D7:18:2B:66:40:33:28:97:E0:F4:9F:81:2B:8B:C9:31:BA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5276baf8-1fe6-3687-b0a7-8f03bdbdb032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:ec:0c:95:93:92:84:6f:27:99:58:68:10:b9:95:3a:7b:
         86:c0:29:40:d8:f5:ce:49:e5:d5:30:aa:8b:88:5c:fe:49:17:
         2b:bc:c9:5b:02:b3:e8:2d:b9:aa:17:0e:02:96:55:33:b2:84:
         ce:0f:e0:30:7e:66:a5:71:6f:6f:70:e0:95:df:cc:0a:3c:88:
         85:46:4e:3a:80:05:0b:aa:4f:18:a1:40:0f:49:e7:4c:d2:07:
         85:50:32:74:74:38:3b:da:1e:e8:e1:2c:0e:79:76:ca:1d:77:
         40:60:d6:fb:22:b5:af:a1:bd:6c:f2:43:24:e3:e7:7b:44:8d:
         8c:99:1b:35:86:62:81:07:b6:b0:57:eb:bb:1c:11:b5:46:a2:
         ca:ba:b0:32:b2:f5:5c:bd:f9:f9:1c:1c:af:25:92:3d:2c:92:
         73:01:81:ac:ce:1e:45:2e:dc:12:2c:57:87:d0:09:5f:e4:b3:
         6b:d8:ad:e4:1b:85:9e:19:dc:41:eb:b2:6e:b5:2b:da:23:53:
         8a:d3:56:bd:46:83:64:e6:9a:b7:18:f4:07:4f:5b:cb:09:c5:
         9a:f6:fd:dd:fe:f4:55:a0:65:80:3f:4b:40:a6:96:04:06:5f:
         e9:fc:f1:c9:d0:60:7c:c1:41:51:a2:2b:da:cf:2c:6d:0c:54:
         1e:6c:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:39:26 2025 by rpki-client