Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/820743bc-b669-33a0-ace3-5ddbdf892a34.roa
File:                     820743bc-b669-33a0-ace3-5ddbdf892a34.roa (raw, json)
Hash identifier:          FyPa9cXes8OQdaJHRA12i8hJze0XVUJgyLuBEyspj2E=
Subject key identifier:   95:3B:B3:72:56:B9:13:0D:B2:FD:63:1D:2E:D9:A8:A6:78:80:3A:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B818AD4720D52A29BEDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/820743bc-b669-33a0-ace3-5ddbdf892a34.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396540
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:81:8a:d4:72:0d:52:a2:9b:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e0afca81-f9ac-418c-9b01-70e10b258758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:5e:19:ba:5e:f6:96:a8:ee:69:01:a2:c6:
                    b8:31:a7:18:46:a1:9f:41:26:37:2d:fc:00:9c:89:
                    06:91:2c:7b:96:26:bf:c9:f6:7f:ff:8f:5d:4c:c5:
                    51:7f:9e:25:4b:4c:0c:80:24:02:49:0e:cc:18:0d:
                    99:6a:f7:f1:d1:5a:da:6a:6b:85:54:22:d9:8c:f1:
                    ab:1f:83:6f:39:72:35:6d:22:88:9a:2c:67:d3:eb:
                    16:88:47:c2:e7:14:6c:4f:56:7c:ea:11:87:d8:31:
                    4f:e9:44:44:58:78:09:9d:aa:6f:ee:67:60:26:08:
                    11:ce:8e:a0:a9:ee:c8:e9:3d:04:ec:e4:0c:ee:dc:
                    5e:dc:bd:9a:42:c0:68:13:2d:0d:d9:44:3f:54:59:
                    de:ce:08:cf:c7:18:c1:0d:25:12:73:e9:62:ab:43:
                    b0:07:8c:62:d7:ff:af:d6:ee:14:8e:c5:39:50:cb:
                    f2:15:39:d5:ae:d6:4a:c4:5a:50:0c:c7:54:8d:38:
                    04:31:d6:60:0a:fc:50:1c:5f:17:85:aa:e5:49:82:
                    89:1b:02:66:f5:41:b8:99:8b:7b:09:a6:8d:32:08:
                    48:8e:c0:da:e8:f1:c2:d5:4f:cb:3d:ee:9d:fb:4c:
                    de:92:1b:48:8e:a9:da:2a:e3:72:5d:f6:7a:f8:79:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:B3:72:56:B9:13:0D:B2:FD:63:1D:2E:D9:A8:A6:78:80:3A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/820743bc-b669-33a0-ace3-5ddbdf892a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:b1:c9:2c:55:61:36:8a:78:ba:3a:1d:ae:a0:15:09:4a:78:
         4d:a1:7d:77:a0:f0:d4:df:1a:f0:2f:dc:34:37:85:36:f9:01:
         3d:44:42:1a:78:af:cb:01:cc:85:95:35:5e:e6:64:dc:bc:66:
         d8:ca:01:19:92:1a:e5:8f:58:b6:bb:24:d9:60:b9:9c:34:6a:
         e1:36:c9:3a:e2:c7:1d:cf:a3:a9:e9:fb:bc:25:bf:22:92:53:
         ff:a6:7a:f6:2c:b1:07:b2:68:96:75:a3:74:c1:99:6b:1d:a1:
         85:66:1c:d6:97:98:4d:aa:49:07:44:7f:88:e5:c5:68:14:34:
         5a:f0:16:0b:5e:51:65:e8:a1:69:c5:96:48:35:13:98:ef:84:
         e7:7b:4e:07:04:2e:82:65:e5:0e:ef:58:4c:3a:c7:bd:a8:5b:
         92:79:7a:3d:83:8b:d2:2e:fa:33:9f:c9:d9:4d:2c:0d:39:00:
         b1:00:d8:4d:68:f2:30:db:83:5f:ff:67:88:44:e9:c4:30:ec:
         b6:cd:f6:34:40:8b:77:5e:36:36:37:96:d8:46:e4:cc:c0:56:
         9a:b1:02:f7:dd:38:6a:53:b3:56:75:6f:99:91:27:92:98:00:
         7e:84:23:77:50:15:ee:59:5a:e9:17:e8:99:99:40:ad:be:24:
         52:eb:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:22:36 2025 by rpki-client