Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95fc7ce6-6cd3-3ae0-bb9a-e45b17913b31.roa
File:                     95fc7ce6-6cd3-3ae0-bb9a-e45b17913b31.roa (raw, json)
Hash identifier:          nQk1evD/3BPp3pWS506rFfM9JUJP0sMXzL+2pTmWZGQ=
Subject key identifier:   5A:EE:24:99:D6:F3:08:BC:07:A9:62:B1:4A:A3:F6:00:50:30:E3:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E60571E372359A4F7F6300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95fc7ce6-6cd3-3ae0-bb9a-e45b17913b31.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396604
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:05:71:e3:72:35:9a:4f:7f:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=24058ea7-99e1-4c3c-8950-7eadeaf6e0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:08:99:18:f7:70:d7:57:51:99:fe:f7:97:
                    7c:92:30:2b:4a:17:d8:2a:a9:61:65:3a:f2:b1:35:
                    ed:97:f9:3f:53:78:41:ad:d0:98:6f:e4:38:9e:f6:
                    7e:b9:15:4c:c4:1c:39:db:58:42:c7:04:92:65:cc:
                    5d:59:84:81:9e:af:d9:09:19:85:62:3b:54:23:e4:
                    53:9d:05:48:73:d4:5b:27:c6:f5:95:6f:b7:6a:63:
                    9d:d1:a1:98:73:44:4f:26:7e:a1:ba:6c:0f:91:87:
                    76:25:2d:9a:09:d4:e2:67:2d:12:78:81:75:c7:47:
                    55:47:c3:42:68:6c:a7:d0:e5:11:18:9c:37:e3:11:
                    e9:60:d1:59:e7:26:1b:a6:f6:6b:47:8c:82:76:94:
                    19:d8:59:2e:2e:af:41:ca:b6:d0:88:ad:c8:ba:75:
                    f2:32:36:96:57:5b:7c:4e:f1:c7:91:55:a7:7f:03:
                    8d:aa:95:aa:21:25:fa:23:ac:4b:9c:53:d8:4b:3d:
                    1c:28:da:34:44:d4:aa:3c:61:e6:dc:c5:19:19:6b:
                    de:b9:49:d4:cb:ff:e2:52:5a:bd:cc:26:37:a7:75:
                    4d:fc:a2:4d:a5:44:d0:a7:34:c2:87:65:9a:14:9e:
                    45:66:2b:f9:28:29:f0:fd:53:33:30:f3:30:7c:56:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EE:24:99:D6:F3:08:BC:07:A9:62:B1:4A:A3:F6:00:50:30:E3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95fc7ce6-6cd3-3ae0-bb9a-e45b17913b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:f8:f7:72:45:9d:9f:a8:56:84:a5:db:06:16:99:cc:0f:
         f5:90:9d:da:21:c1:bb:82:37:ff:47:8f:ea:56:a0:c1:53:53:
         54:ce:47:cc:c0:98:f6:52:c3:1c:56:56:e2:3d:1c:91:d0:81:
         41:03:70:57:d8:0f:11:86:d9:a3:e6:dd:7f:55:d1:31:50:e6:
         35:d8:31:9c:ba:8e:1f:90:06:01:f9:1f:9a:6f:bb:2a:29:5a:
         91:41:a7:4d:97:4e:70:08:b6:1f:a0:ff:4c:b6:23:fc:c0:e2:
         7f:83:4f:d7:a2:29:f6:24:8b:b2:cc:ea:52:a9:51:cc:d3:fb:
         06:cf:de:52:23:e9:4b:ae:4a:3b:0c:bd:d9:22:e9:fd:ba:da:
         39:24:b8:3f:4b:88:74:8c:e5:a8:bc:02:30:54:0c:72:f7:df:
         64:5d:b1:e4:ba:5c:3f:38:0e:e2:2c:8f:72:15:00:1c:c2:e4:
         40:86:42:5a:48:7e:b4:8b:07:4d:db:d7:9b:41:3d:11:94:73:
         b0:5d:50:46:2f:36:b4:60:58:d9:0c:f4:19:48:17:e7:02:08:
         1e:db:e5:5b:60:db:3c:6b:c8:ed:82:cc:4e:a0:a4:ff:c7:71:
         39:e0:d3:3d:10:aa:ac:7c:25:37:9e:74:2e:84:6d:46:95:ab:
         01:ab:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:15 2025 by rpki-client