Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa
File:                     926ea4bf-bd76-3931-a192-05e08f68364c.roa (raw, json)
Hash identifier:          SB73iDMv+714gDgpi6fIG8ohb7uqw/e6KnQmLj7RNHg=
Subject key identifier:   37:80:35:2C:80:1A:38:87:7E:C8:4F:AF:CB:BC:A6:A5:4B:D2:94:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6094EAB0EEB7590352E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396586
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:09:4e:ab:0e:eb:75:90:35:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=7afaa559-a0b5-4e26-b2d2-bbb538ee7343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:bf:c7:0b:8e:a8:72:53:26:52:28:e7:1c:
                    cf:db:ec:28:08:07:6a:54:a0:ec:23:5d:07:b5:72:
                    18:08:37:43:c0:82:f5:a1:6a:28:28:26:40:a4:d9:
                    58:9c:db:11:0f:66:46:e1:6d:ef:8a:89:7a:4b:6e:
                    52:0a:dc:d3:49:e6:10:90:fa:a7:c2:f8:9c:ce:5f:
                    e6:8b:e8:bf:6e:a5:d0:e4:a3:d5:81:01:85:8c:f0:
                    ee:b0:d1:57:ab:e6:d7:42:8d:80:5c:5d:54:66:c9:
                    c6:09:a9:ac:d2:31:76:c7:8a:2d:75:1f:f2:cf:b2:
                    e0:bc:29:16:69:0e:e8:42:36:f1:70:e0:3a:11:42:
                    1c:60:c8:58:08:66:12:c8:57:d1:90:62:c3:61:7a:
                    8b:6e:09:b2:39:23:3b:05:72:25:55:c4:3c:0f:26:
                    55:8a:2d:78:3a:76:92:4f:1d:56:42:ce:78:65:cd:
                    5f:57:79:9b:ef:c6:69:a7:a8:6c:3d:14:0f:c8:50:
                    93:95:fc:ba:8f:18:51:6b:c9:56:51:96:a7:4a:f5:
                    44:97:95:7d:50:77:e5:27:b8:ee:66:36:c4:a4:2a:
                    c1:96:92:7e:37:8b:03:54:ca:1c:b1:86:dc:2e:74:
                    0c:cb:9a:01:86:db:5d:b2:92:b9:1a:e0:50:a8:b3:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:80:35:2C:80:1A:38:87:7E:C8:4F:AF:CB:BC:A6:A5:4B:D2:94:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:19:85:6e:e3:a7:1f:51:de:0e:5b:65:62:db:8d:ea:e0:
         c8:d8:67:84:00:0f:56:26:a5:36:21:01:91:0f:47:13:fe:61:
         98:ab:74:6b:03:53:90:7b:0c:b9:d4:5a:b6:6d:65:58:7a:39:
         b2:01:45:18:f9:61:68:ff:52:8a:56:52:3b:a2:61:56:9a:d3:
         ae:da:5d:3c:2c:5f:1d:2e:32:c2:16:23:57:53:71:03:d3:15:
         6a:51:1c:ab:97:76:00:8b:88:e5:b5:97:ed:0a:2c:d6:1a:cd:
         15:04:ed:a7:d0:d4:d2:82:af:56:6a:44:99:5e:20:fd:80:57:
         1c:88:2c:52:e9:be:41:f8:77:7c:3a:fc:52:c6:79:3e:b4:b9:
         17:b8:4a:a1:63:30:58:80:c8:13:e5:3a:30:84:06:ae:17:d9:
         a9:66:b2:4a:19:f8:50:09:e9:c3:e4:70:9b:f6:07:31:58:a4:
         c4:c8:49:03:03:7f:94:1a:00:66:4a:c4:2a:5c:b0:60:80:d1:
         23:7e:8d:06:30:2f:26:21:e6:9b:cf:cc:be:94:10:e3:ed:5f:
         77:94:6e:82:6f:3b:ab:e0:c8:1e:c1:51:90:d3:c1:98:86:a0:
         c8:8f:6d:57:3b:0c:8d:49:68:9d:d1:1f:3b:97:50:ec:c9:51:
         5f:cc:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:05:15 2025 by rpki-client