Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa
File:                     54e64cdf-3b94-377b-bc8e-cfac754f322c.roa (raw, json)
Hash identifier:          mgOVyQGO9do45YjU31srYPZHvt703Lufp+tCiIH+9NM=
Subject key identifier:   50:07:94:EE:9A:01:A1:42:F5:A6:1F:BA:FD:EF:0D:43:F9:9A:DB:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6063ECED9AB4958DBC400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     36617
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:06:3e:ce:d9:ab:49:58:db:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=5379da11-df53-4466-a84c-f8dd54903222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:22:e2:1d:d3:cf:12:ee:ce:d9:65:18:1e:
                    87:3b:e6:e2:ff:25:24:59:4d:09:00:b2:e4:39:f5:
                    ac:d3:5f:34:bb:15:a3:ea:87:43:23:ea:c1:d9:09:
                    6a:29:ba:9c:82:3d:ca:e7:d7:91:78:75:db:26:db:
                    8d:ce:30:ef:d1:ba:41:a3:e5:9e:a9:0d:d0:8b:aa:
                    87:7d:55:ec:be:da:cc:8d:de:1b:a9:53:b6:fb:03:
                    c3:8b:ed:97:aa:74:13:f6:a6:52:cd:f4:07:89:63:
                    1b:62:c6:47:fd:ea:ab:b9:f2:36:20:52:27:05:dd:
                    6f:a4:bd:0a:06:fe:f1:61:d0:27:5a:83:6d:f1:c4:
                    99:5b:8b:fd:15:71:5e:9a:a3:ec:8b:fe:db:00:ea:
                    d8:ca:18:79:4d:4d:b6:67:7d:f7:55:89:6b:05:bd:
                    86:4d:6f:30:5c:8f:37:7f:77:76:b3:61:07:ad:e8:
                    31:18:8a:82:d7:b5:50:c4:5e:f5:d5:a9:db:37:61:
                    87:4a:26:ae:3b:84:38:70:4e:5d:0f:3b:34:d6:ea:
                    6c:a9:30:23:e7:47:8a:f9:94:5a:8b:b8:12:14:c3:
                    11:c3:81:27:d9:62:83:2e:d6:dc:03:63:8f:e6:ed:
                    0f:3d:a4:76:54:37:a0:60:9a:b6:08:cc:42:f1:e2:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:94:EE:9A:01:A1:42:F5:A6:1F:BA:FD:EF:0D:43:F9:9A:DB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54e64cdf-3b94-377b-bc8e-cfac754f322c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:6e:c1:ae:de:4e:db:f1:e4:64:91:03:2d:8c:65:0e:b9:
         36:51:40:52:28:c2:a4:5a:dd:da:db:c2:e7:57:76:9b:db:5d:
         ed:69:12:e2:16:92:6e:a9:7c:c1:96:e7:b0:3b:e4:47:b3:14:
         1f:81:92:67:08:7c:61:3a:c8:f1:34:74:a9:ed:f9:05:70:c3:
         14:64:7b:73:b0:ec:83:24:5f:65:d1:66:a2:17:81:3e:04:5f:
         db:20:b4:77:a7:de:0f:07:a4:1e:45:d4:e6:82:e8:52:ac:bd:
         93:bf:64:5d:04:45:df:e0:52:ec:e3:f3:19:92:5f:d8:7d:a8:
         d4:fd:aa:42:62:88:ba:e7:21:66:0c:28:2d:ce:61:0e:68:b2:
         ad:29:a7:3a:d3:cf:35:26:c3:6a:48:37:8d:ff:2b:ab:2b:e4:
         25:3b:7f:79:cc:bb:4a:80:45:15:88:c5:8a:7d:06:a3:aa:3e:
         16:1d:09:bd:fb:37:be:b1:5c:6d:8d:54:6f:db:d7:46:b6:6f:
         e7:d3:e6:72:db:b6:3a:5b:ce:33:61:d4:67:3e:e8:48:96:29:
         20:3f:f7:ae:35:95:50:e3:0d:74:70:a7:e3:ed:9f:ee:ac:ff:
         9b:98:88:4c:e2:7a:dc:c5:99:5b:22:2b:cb:84:85:2d:01:1c:
         9b:ee:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:38 2025 by rpki-client