Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa
File:                     bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa (raw, json)
Hash identifier:          mFMRkUdVEHD6VRBDP3eAKK3WdfzA2ebZNOM0PrfLeaY=
Subject key identifier:   99:A5:CC:72:BF:8A:0C:39:5B:5A:F1:1E:46:82:C8:44:EF:A6:75:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF0A056E77F560DC575C6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396594
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:a0:56:e7:7f:56:0d:c5:75:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=9d0412a0-8a98-4112-8e2a-a553c90cd69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:56:26:b5:ab:31:3c:f7:65:9a:57:49:77:
                    40:aa:e5:4b:5f:e2:fc:b4:08:5d:88:6d:30:3d:a4:
                    26:8f:e9:31:55:0d:31:f8:07:e9:9e:15:a7:36:4d:
                    32:11:f6:47:b4:e3:da:16:29:c4:74:b4:ce:e4:77:
                    62:c2:73:6a:5d:62:4f:27:c1:8d:00:96:7a:ac:85:
                    69:01:e1:38:14:16:80:47:a2:36:6c:49:c2:73:cf:
                    ee:66:fe:d7:50:e7:e2:5d:37:29:a2:60:9f:0f:2d:
                    9c:d0:34:08:ce:6e:df:63:74:e3:7c:6d:d6:e0:85:
                    07:96:cc:58:82:59:65:a0:af:d5:0d:39:dc:8b:f3:
                    3d:b1:e6:ab:06:58:32:b0:21:21:32:4d:47:1d:0c:
                    5d:76:75:a4:9a:1c:a2:ef:4d:15:50:0a:38:b5:36:
                    5b:83:0b:35:65:85:0d:82:f8:7b:67:c4:93:c3:0d:
                    19:0e:be:94:2d:a4:ae:e8:8f:7a:e1:ab:4d:a3:74:
                    a9:d0:47:9a:12:6a:fe:77:a6:fb:20:5e:2d:dd:be:
                    81:ab:c2:22:9f:b5:0f:f1:8b:01:98:ce:10:a2:f6:
                    c0:44:ec:02:5d:cc:7b:09:00:93:66:c7:ae:6e:22:
                    97:9c:e2:ac:5a:06:89:04:cf:c6:13:94:18:16:01:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:CC:72:BF:8A:0C:39:5B:5A:F1:1E:46:82:C8:44:EF:A6:75:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:64:d0:e9:14:07:c9:4b:c4:4d:5f:68:bc:72:8c:7c:1a:54:
         7d:e9:3b:cd:4a:00:57:42:97:91:b9:89:d4:e0:f5:70:6b:e7:
         93:3c:81:e1:3c:a6:f6:97:6a:9d:ba:21:a9:7f:37:eb:3c:13:
         aa:4c:9a:35:3d:38:19:0b:a0:78:14:a5:27:07:ef:1c:6b:80:
         f3:bc:03:5e:f2:1e:16:ab:dc:23:1d:0e:03:34:c3:fc:82:31:
         d0:44:34:ab:06:ce:f3:51:b6:da:91:61:a0:7d:8f:04:e7:6b:
         ff:67:5a:17:24:02:35:eb:d9:24:f3:e3:e1:e8:92:94:8b:85:
         a4:88:9d:ae:95:a4:29:fd:29:91:bc:9b:3f:b6:d4:92:7b:d8:
         02:bd:c1:0d:94:de:a0:86:bb:f9:77:bf:5f:86:3d:0d:a0:6b:
         85:95:13:b7:57:50:04:9c:af:02:90:04:a8:da:43:22:86:14:
         d8:10:85:87:b8:1f:a6:6f:db:9b:2f:7f:c1:ef:a7:b7:fa:b4:
         b3:2f:b0:df:d5:81:37:74:c8:fe:23:ab:b3:db:42:9a:a8:4b:
         ff:8a:b8:6c:68:41:68:ed:42:32:75:59:cf:35:28:50:7b:f6:
         2a:a4:d0:a4:fc:14:5f:97:e6:ec:72:ff:25:df:ad:cf:81:a5:
         6b:d5:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:05 2025 by rpki-client