Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa
File:                     79188d52-06c8-3f9b-94f4-c88040307fea.roa (raw, json)
Hash identifier:          eVcrw+bg/0+3RolOC67bwxjwiMuxRiHFD0tB7UNIeno=
Subject key identifier:   A2:B0:4E:F9:01:53:D8:43:6C:B6:85:14:A9:58:77:92:24:D1:0D:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6065FDEFEB828DF949D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396611
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:06:5f:de:fe:b8:28:df:94:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=f386f17e-e60f-4c2f-ba39-aa56b42cdfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:52:2a:9e:8f:ee:59:ce:42:e6:35:cf:04:
                    39:27:45:52:1e:13:20:15:da:41:09:0b:5a:b4:e2:
                    34:a5:6e:6a:44:fd:4f:39:1f:17:d3:34:65:24:32:
                    9a:d9:15:fd:31:94:36:e4:8f:ee:c2:c1:ee:9c:f0:
                    9a:62:f3:4b:ff:3f:b8:b9:a7:a9:5b:81:8b:36:2c:
                    a6:17:13:ab:49:c9:0e:40:ca:1c:d5:8a:69:27:4b:
                    a7:5c:47:47:f6:54:2a:2c:21:34:78:2d:f3:bd:0e:
                    ce:7e:0d:a9:37:f2:9b:4a:c6:ce:18:bf:26:c2:94:
                    8a:b3:10:25:fd:93:97:91:66:20:00:ae:4b:dc:6d:
                    55:02:e8:8b:ba:e9:f7:41:b3:9f:c7:23:4e:42:1e:
                    a6:43:83:6c:87:ac:ae:52:60:e0:44:82:24:ad:1d:
                    06:7a:5c:c3:7e:16:ab:ad:87:13:95:4e:ce:20:a1:
                    7d:0b:db:9b:7b:4e:b2:73:af:ce:52:5c:0f:3e:5b:
                    36:f4:91:1c:3e:7e:1c:33:bb:05:c2:66:7e:48:cd:
                    6b:40:29:52:48:5b:56:e9:51:5a:11:fe:49:82:0b:
                    11:80:bc:31:d3:c2:a6:58:04:61:49:d4:15:0a:3d:
                    d6:1c:ab:13:d4:80:f4:7d:f3:ac:bd:2c:36:c3:77:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B0:4E:F9:01:53:D8:43:6C:B6:85:14:A9:58:77:92:24:D1:0D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:0e:86:a2:b4:ac:02:99:3f:e4:4e:0f:c6:f4:dc:91:d9:
         c4:66:c4:e5:7f:cd:52:9e:08:4f:43:b2:80:d9:e7:a2:c9:43:
         42:05:b6:e3:b2:d6:ac:9d:02:e4:92:0f:f2:57:31:2f:fb:82:
         d0:d5:05:28:e6:83:19:ee:b6:03:69:8a:bd:2a:8e:83:e6:bf:
         b3:91:26:b3:40:f8:83:31:37:4d:0a:50:76:c7:a3:17:d1:89:
         6f:3d:da:9f:08:7e:1f:71:13:85:01:f1:fa:16:b1:0a:a1:12:
         33:e7:11:39:ad:ab:87:f0:98:29:0e:cb:86:99:32:0e:87:dd:
         17:f4:7c:c8:21:9f:07:8c:0d:ff:c3:a2:8b:53:a2:ba:77:6b:
         18:21:60:45:e1:59:1b:9d:32:1d:47:be:19:a8:4e:73:51:9c:
         6f:46:d3:fe:66:78:7f:1c:04:57:8a:61:70:46:cc:9d:72:eb:
         0e:5e:da:03:73:15:47:2a:2a:3d:9f:0d:b4:c4:6d:55:37:35:
         89:c2:40:a3:5d:0c:00:da:92:d7:9e:de:2b:33:de:6a:36:be:
         b8:ca:38:a2:ba:6d:0c:cd:5f:0e:05:ef:e2:cf:c5:f9:dd:6c:
         af:0f:56:0c:28:6e:75:72:d8:8c:1e:c1:de:6d:a2:f5:b6:3e:
         65:86:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:20 2025 by rpki-client