Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0dbeca-3f8b-367d-b72d-0ea0f4dd340b.roa
File:                     8c0dbeca-3f8b-367d-b72d-0ea0f4dd340b.roa (raw, json)
Hash identifier:          ed00YaQp/YEL9giJPN+y46DhXmhuCePmy+gW79lVWd0=
Subject key identifier:   66:70:04:46:57:E1:2E:BE:0B:76:A0:5E:05:ED:A6:FB:CB:BB:17:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B8318BECF763B07D63280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0dbeca-3f8b-367d-b72d-0ea0f4dd340b.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396580
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:83:18:be:cf:76:3b:07:d6:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8ef3ac9f-3370-4a34-9df6-65d830fb8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:28:cb:15:8a:96:08:1d:25:0c:93:98:5a:
                    4f:2e:68:e2:f6:55:5c:2d:b2:bb:e2:f9:63:96:2b:
                    0c:5d:a9:6d:be:1b:f3:2d:a7:ed:37:6e:63:ff:2f:
                    c5:18:bb:a9:d6:c7:b1:4f:91:b7:16:81:da:92:55:
                    4c:ec:88:52:92:d2:6e:c4:8d:52:ce:c0:28:12:5b:
                    40:d6:ce:9f:0a:0a:8b:cf:2a:a0:fb:88:3c:de:f9:
                    ba:aa:61:74:19:98:d4:7d:94:8d:1c:a6:a7:98:23:
                    96:23:04:f6:ce:79:33:24:16:99:93:8f:5b:5d:04:
                    7f:a5:7c:f6:92:db:d7:e0:66:85:4c:86:08:51:0a:
                    33:ed:3c:22:cf:37:87:5c:21:23:8f:44:dc:6f:5e:
                    97:45:ab:e9:47:e2:3d:d1:80:8c:49:ff:2a:9c:9a:
                    da:ad:3f:15:a5:ee:49:e0:eb:e2:44:0d:f6:39:52:
                    e7:48:df:5e:73:20:d1:2d:4a:47:58:10:69:d4:94:
                    a0:56:f2:02:f4:54:49:8f:d0:2c:15:0e:e9:d4:7a:
                    28:d2:72:41:f9:4f:ad:73:3e:5f:da:79:9c:fc:e6:
                    dd:e2:f0:c2:f8:ee:37:3c:c6:8e:2c:6e:7b:66:40:
                    f9:56:d3:b4:47:e7:53:eb:9f:fc:c1:59:23:a4:4d:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:04:46:57:E1:2E:BE:0B:76:A0:5E:05:ED:A6:FB:CB:BB:17:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0dbeca-3f8b-367d-b72d-0ea0f4dd340b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:9b:8d:8d:10:03:1a:79:c9:70:45:2c:c3:6d:61:40:73:
         c6:07:46:81:ba:f8:ab:94:6e:42:83:8a:f9:39:2b:aa:7d:32:
         43:46:92:98:b6:46:3a:20:c5:76:4c:1b:45:a4:bf:17:6e:51:
         08:8c:1a:e2:40:5d:44:f5:c0:f2:ce:64:a1:a0:79:01:d4:10:
         d6:47:aa:e4:88:98:01:0d:d6:e0:61:98:58:a6:dd:f0:22:97:
         88:40:35:6d:3a:4a:ae:e8:00:18:66:66:8b:89:10:4f:98:ef:
         b9:e4:c6:a4:05:98:7f:df:6d:b4:41:6e:79:df:ee:29:80:ad:
         d4:cb:f6:c4:3b:a8:1f:55:5c:84:5e:54:74:d5:55:ff:e6:4f:
         2b:d2:bf:8a:6a:c9:7d:7c:0d:d3:9d:d7:02:79:91:f6:6e:c3:
         04:d4:b0:45:66:f6:03:6a:56:e8:66:c7:93:2e:c4:c2:d8:eb:
         8a:60:50:27:e7:b7:0d:5b:f4:1a:bc:40:b3:7b:cc:6b:2d:a2:
         f2:a7:bd:b5:a4:84:10:63:2f:d9:7d:7c:c4:00:24:78:8d:0e:
         e1:db:75:1f:15:8e:61:87:80:66:7b:20:31:c4:81:0e:6c:73:
         8e:bf:aa:e1:88:bc:f7:ba:2c:c6:45:eb:8d:1f:7a:ba:5d:96:
         ac:98:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:32 2025 by rpki-client