Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531a51b7-eba4-3000-874a-02ad5e4d6793.roa
File:                     531a51b7-eba4-3000-874a-02ad5e4d6793.roa (raw, json)
Hash identifier:          X7zXtFn/K/qo7xM3AvWvjAzmt/d5IET1rMFbjpAUzFc=
Subject key identifier:   90:5A:92:9E:3B:62:01:CA:A6:47:78:0E:69:92:0C:B3:12:DA:CD:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E60750867BE2BD1261A00C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531a51b7-eba4-3000-874a-02ad5e4d6793.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396616
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:07:50:86:7b:e2:bd:12:61:a0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=93642c5f-ca7a-46df-96b9-37e001c1d2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:38:aa:19:0c:11:65:e8:b8:e1:75:8d:53:
                    04:78:f6:03:7f:f8:49:75:03:56:b0:d2:51:3d:11:
                    1f:01:10:97:b6:d8:8c:65:d7:24:76:ea:8d:28:cc:
                    da:a7:68:35:39:f9:5c:97:a9:ce:08:e7:90:5f:ba:
                    cc:b2:9b:a0:6e:52:33:d9:8f:89:7b:79:94:35:40:
                    ac:aa:0a:a5:07:f8:36:77:12:16:cb:0b:bc:c4:c6:
                    f3:0b:bb:f4:1b:be:81:0b:f0:c8:a9:1b:51:03:30:
                    6d:63:1a:f1:25:c1:76:fc:ab:e0:ab:0f:db:cc:90:
                    b4:b7:ed:90:e2:14:f5:c8:86:4f:19:e0:72:75:d8:
                    03:b6:f7:74:c6:5e:54:8c:bb:df:fd:65:4c:fd:a1:
                    f2:b7:b2:fb:82:2e:59:7e:df:63:eb:0f:d5:dc:07:
                    49:e8:3f:47:8d:8b:de:bb:c3:73:0d:17:b1:2e:92:
                    5f:c4:01:75:98:b2:e6:1b:0a:61:48:18:0e:67:57:
                    6b:40:9a:6f:fc:3e:f3:1b:f1:88:bc:39:9b:6e:8d:
                    82:9d:b3:99:18:e8:ba:d6:62:93:b3:7c:12:b3:95:
                    98:c0:2e:5d:cc:b3:f0:bf:78:8b:59:b2:12:bb:c1:
                    b2:1c:8a:ae:74:73:bd:70:93:16:66:17:12:eb:2d:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5A:92:9E:3B:62:01:CA:A6:47:78:0E:69:92:0C:B3:12:DA:CD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531a51b7-eba4-3000-874a-02ad5e4d6793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:24:9e:0b:d5:15:fd:c8:fe:20:f0:96:50:ff:f1:55:fb:68:
         e6:a3:e7:f4:92:15:35:44:17:cc:e4:bb:c3:2f:8e:db:4e:39:
         ac:62:05:f2:f7:12:cb:de:80:86:63:1e:a6:37:de:b0:2b:6a:
         e3:eb:72:43:22:09:26:d9:87:53:13:93:e1:12:f3:64:a2:7e:
         ce:43:d3:6a:69:c9:7b:42:ad:b9:da:bd:12:c0:22:99:56:68:
         7d:8d:3d:e2:23:26:25:17:f2:8f:4f:61:e9:d5:0d:a1:27:c2:
         45:a6:52:b5:98:20:91:4f:71:ec:fc:91:1e:88:dd:9c:d2:2d:
         6f:4e:1b:c6:c9:55:ac:88:fe:32:fa:a1:6b:80:98:f6:73:31:
         8e:8a:90:74:c2:59:13:0b:91:03:9e:5e:97:a1:86:9c:aa:b4:
         54:22:97:dc:a1:f3:1a:17:bf:48:ff:7b:d2:9f:6b:9c:fd:0e:
         3e:be:bb:f3:82:15:85:58:44:09:22:de:66:f1:32:fe:ab:a2:
         b4:8c:73:25:46:6c:48:e7:f6:c1:ca:e0:3c:0a:1c:a3:10:82:
         37:f9:08:d6:ce:8b:51:cf:f9:ee:c6:83:d2:e3:43:01:42:22:
         01:94:cc:5a:44:ba:d4:f9:e0:49:f2:fc:96:b9:08:07:d2:e1:
         c0:34:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:32 2025 by rpki-client