Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa
File:                     b391d9a3-be6a-3e10-b3b4-5de58481660e.roa (raw, json)
Hash identifier:          1uJcGiIDADyns0od2cKlGZSBcJrQDUvPhzbbfZc1HHY=
Subject key identifier:   A3:D6:A9:E6:87:DD:1F:84:1A:A2:FB:9B:C8:DC:30:DB:E9:15:97:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B823C124B80537ED86A84
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396567
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:82:3c:12:4b:80:53:7e:d8:6a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=2c007d1e-e8fd-47f5-bfa9-c013703892da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:31:c7:0c:69:56:d4:49:0e:10:9d:3d:99:
                    ea:6b:63:56:e0:f3:4b:ec:e3:ed:33:9c:c4:af:12:
                    a8:db:db:95:6a:c6:f8:2e:c1:d5:3d:51:58:ab:3f:
                    ac:64:7c:ff:30:6a:a7:d2:f1:11:a5:fd:7a:42:78:
                    22:b7:cb:fa:01:23:d9:80:a9:f8:17:84:50:ec:d0:
                    15:c2:37:46:19:43:86:4e:fb:f7:6a:5e:d1:9a:6a:
                    25:d9:e3:39:f7:4d:7c:76:fe:07:ee:9d:b0:e3:be:
                    64:0c:50:63:c8:5e:35:41:7d:24:04:e7:27:83:18:
                    f9:1c:6c:4f:ce:fa:a4:9b:37:9f:96:7f:ed:df:7b:
                    20:cb:9e:89:5f:9f:09:79:83:87:15:f6:06:ea:49:
                    08:93:55:51:18:94:ac:b2:2a:80:22:67:dc:d9:a9:
                    a2:a5:28:fc:a9:a4:ea:67:dd:5c:7a:8f:39:0d:b1:
                    01:0e:cf:25:75:bc:d9:58:40:1e:54:bb:ce:e8:54:
                    b3:b0:b7:71:46:c1:73:c8:32:96:0f:cc:6e:58:a9:
                    5e:23:89:21:0d:6b:47:af:95:dd:80:33:8b:5b:e4:
                    aa:d4:dd:ef:7c:8b:1a:c1:fe:92:3a:44:e9:29:7b:
                    23:d6:bb:e0:ba:45:22:15:f8:42:8a:ac:2b:42:54:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:A9:E6:87:DD:1F:84:1A:A2:FB:9B:C8:DC:30:DB:E9:15:97:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:52:b2:13:ea:2a:6d:50:18:00:ed:19:03:cb:43:60:c0:
         3b:1f:81:63:19:26:83:1b:cf:84:f5:dc:dc:dd:b7:0f:e1:c8:
         7d:3d:71:7b:99:90:66:1c:a1:a0:47:ea:28:c1:fe:b9:b4:bd:
         67:ec:35:33:cd:f8:2c:3f:4e:71:78:3b:c1:64:12:93:2d:35:
         32:75:6c:ae:58:71:1f:b3:5b:df:a4:8c:da:78:e6:26:ee:c5:
         e3:af:b5:76:fb:ed:76:ec:87:89:58:c0:82:e8:64:51:e4:7c:
         90:2d:8b:4d:31:c4:a6:cc:ee:a9:82:d1:73:26:ad:ef:fd:cc:
         ee:4b:88:42:2e:53:80:e9:73:e2:ef:d3:52:ae:f1:5b:7e:46:
         5f:42:f6:7e:ea:ce:7c:05:60:ec:44:97:25:95:84:91:5d:52:
         e4:f6:06:0e:fb:74:40:e8:10:f9:ed:fe:0d:15:21:e9:bc:2a:
         7f:66:5d:16:55:5a:30:eb:1c:65:0d:19:d4:40:a1:d7:91:68:
         42:64:1e:7e:a7:34:08:33:cb:a4:52:22:ef:f7:92:5a:23:b6:
         11:cb:db:71:b1:91:80:67:a1:a7:d0:2d:93:3e:63:cd:66:c5:
         08:d4:1e:22:20:40:e9:a4:ee:50:64:17:a5:3b:ce:ca:37:b2:
         61:37:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:36 2025 by rpki-client