Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa
File:                     5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa (raw, json)
Hash identifier:          7YN+oq0cDWCAlrYfAfp1aGQZ7KhfgLPUdEFYnp79esE=
Subject key identifier:   BE:E0:14:F3:D3:F2:08:EE:C6:30:99:19:C7:6A:2B:B7:B5:D0:14:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6059EDF5A2C892EB6D5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     27544
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:05:9e:df:5a:2c:89:2e:b6:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=d2e99329-5e11-449c-aa6e-846151ccab9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:15:d2:ac:12:c8:5d:2f:e3:7c:3c:76:0c:d9:
                    dd:5a:0a:67:2b:05:e3:f7:83:08:35:28:72:0c:5c:
                    03:06:0f:b5:66:f8:e4:93:60:98:31:83:10:47:d0:
                    f2:dc:a8:c7:b5:41:3c:dd:c1:3a:12:57:9a:0a:ad:
                    95:7b:db:08:63:fe:a8:8f:4f:42:75:8f:f0:95:20:
                    29:aa:1b:e2:f5:94:26:9d:90:21:f7:32:ca:f4:b3:
                    25:37:d1:f4:64:1e:11:76:06:89:39:e3:74:65:f2:
                    c0:23:73:16:54:83:ee:98:15:28:c2:97:07:8f:a1:
                    f7:5c:07:40:8a:0a:4b:4f:fd:7c:7f:eb:f6:4b:05:
                    31:73:8e:b2:30:bb:0a:d8:23:0f:1e:21:c5:75:c1:
                    ce:3c:cf:b0:94:d9:bf:3a:ec:a8:98:46:aa:d9:f6:
                    08:d0:c8:89:da:7b:fa:0b:f5:62:75:78:37:4c:de:
                    77:29:a3:2e:fc:e0:9a:93:2f:ce:b0:1a:8c:a3:f4:
                    d2:6f:2c:63:e9:89:11:fb:cd:11:07:51:e8:b1:86:
                    72:29:fb:b5:61:11:f7:00:5a:2e:3a:b7:c3:d1:3a:
                    0b:c6:7e:17:ba:fd:79:1d:ce:33:93:63:93:da:3d:
                    12:57:6d:ba:ed:47:df:35:40:54:ff:8f:1c:af:26:
                    cb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:14:F3:D3:F2:08:EE:C6:30:99:19:C7:6A:2B:B7:B5:D0:14:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e62cfc4-b1c8-3652-96b4-8a1a40e1acf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:a8:24:87:85:e7:2e:b4:f7:b6:7e:b2:df:a5:11:44:21:
         37:fc:be:39:03:de:4b:45:01:af:df:fe:83:64:9e:4a:cc:69:
         8f:bf:ee:08:00:bf:1e:da:a2:da:92:90:7d:ae:4a:aa:49:01:
         94:25:10:c6:f8:c5:f9:53:7d:2c:50:2a:57:4c:74:cd:45:a5:
         02:fd:c1:d1:27:08:b3:d6:bb:e3:9f:9a:84:17:36:a2:32:75:
         e9:6a:06:9a:64:c9:a6:bb:ac:35:c3:69:93:92:7a:1a:54:38:
         43:78:db:80:b1:6b:b1:73:05:c5:67:9e:f3:6f:d7:3c:c7:43:
         3d:cc:76:3e:24:1b:8e:ac:da:f6:f7:e1:89:e1:f9:62:cf:cc:
         c6:a7:21:e1:86:1e:6e:53:09:a2:7b:3a:94:75:6a:dc:86:aa:
         50:c4:93:b4:25:cc:df:e9:96:57:4b:20:70:15:d0:6c:d9:48:
         1b:0f:23:a0:56:11:24:92:9f:c8:c9:5e:df:45:b0:16:2e:cc:
         79:4b:c7:31:c8:36:4a:a5:76:ea:9a:91:39:5d:dd:52:01:af:
         50:4e:fd:3a:32:29:9a:3e:08:16:46:16:8f:78:48:53:24:a8:
         84:df:c5:be:47:38:a2:ee:88:57:c0:bd:0c:84:e3:d1:7b:06:
         b7:be:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:28 2025 by rpki-client