Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa
File:                     dd248fc5-930e-3860-aece-04e4e0e8003a.roa (raw, json)
Hash identifier:          m6QKW0SbzRdU82QQyi6nkrJg7Bo2YZ5zsf/5npUDQAM=
Subject key identifier:   8B:93:9A:BD:76:2C:CB:F9:99:D7:6B:B4:72:B6:B2:19:E7:F8:09:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B8075CA6EB4A5B9736EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     397201
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:80:75:ca:6e:b4:a5:b9:73:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=2a160f3c-8a3d-4874-bae7-a9c0537649b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:d1:54:3f:c9:e3:1d:df:03:78:be:7d:cc:
                    c2:1d:ec:ee:ef:db:4a:5c:78:d1:86:ad:80:fd:3e:
                    e2:39:51:45:7e:6e:e3:58:7c:d6:5c:21:af:fc:38:
                    77:a9:4a:b8:c1:d9:9f:46:12:00:a4:89:39:26:98:
                    d3:3e:7b:22:02:40:d3:fb:3a:c3:1d:1b:8d:72:09:
                    88:9d:2f:dd:22:83:f5:b4:19:9c:e7:c0:4a:eb:de:
                    17:6c:9a:07:1d:ce:d1:88:86:b4:f0:2f:a3:a6:59:
                    6e:87:c0:98:2b:18:5d:e3:5f:db:25:67:94:19:fd:
                    67:eb:e7:8e:f9:43:73:22:68:7f:f2:1c:a1:e6:84:
                    52:13:72:ae:5b:6b:0d:dc:8d:7b:16:90:29:b7:d1:
                    6a:69:4d:6a:14:57:75:ca:bb:ac:ff:00:1c:d7:5b:
                    01:dd:c4:e2:d7:54:da:44:1a:89:74:8c:f8:18:9d:
                    f5:b1:e3:45:70:40:b1:9b:e6:cf:91:ca:35:d9:12:
                    5e:1e:f7:58:b5:e8:5b:75:96:fe:5b:54:d4:8c:4c:
                    04:a8:c3:ee:fa:19:11:4d:57:cd:97:9b:04:86:71:
                    f2:29:d9:b3:c8:7a:57:bc:80:6e:5b:57:c3:9b:98:
                    ae:ca:f5:a7:b3:be:bf:4a:57:85:7b:45:9d:9c:32:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:93:9A:BD:76:2C:CB:F9:99:D7:6B:B4:72:B6:B2:19:E7:F8:09:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:51:37:7c:b7:91:2d:5a:60:d5:95:ba:38:78:aa:fe:48:
         20:c3:05:d5:a1:03:8e:e5:c3:10:28:66:f4:9e:a5:68:a3:8c:
         96:fa:93:01:81:60:d6:6e:d6:c1:9c:42:27:ec:f8:61:be:d3:
         cf:8e:9b:b7:4e:ec:82:97:ef:07:40:d0:f3:3a:34:21:c3:69:
         1a:bb:60:5a:e4:7d:f7:7a:28:6b:d8:de:f6:5b:5d:c2:39:0c:
         1f:4a:50:d4:81:59:e6:9a:bf:fc:09:7a:f1:d9:4f:2e:b8:de:
         b2:4c:a5:ec:bf:00:f3:06:96:da:ea:4a:8a:c7:b2:ba:3d:54:
         5f:a7:e5:14:32:7f:9d:ad:f9:51:37:ba:ed:a9:44:6b:72:26:
         2b:14:86:f5:f2:b6:6c:ce:cd:e3:81:89:3f:69:ea:b3:88:82:
         81:b8:97:fa:2b:13:42:7d:5e:6f:62:b0:e9:ac:62:10:39:72:
         15:bc:ef:75:cb:ee:f1:75:ab:0f:09:53:15:e1:ed:4f:03:6e:
         1d:69:c1:ca:02:53:e5:e3:ed:ba:97:4d:72:e2:c4:f3:f1:3e:
         0f:e8:2e:87:0d:01:c4:76:94:0c:d9:38:92:90:ff:39:2b:2d:
         d7:2d:a3:e3:9f:cb:f0:6a:c4:2f:b4:7d:ef:d8:99:f4:75:e7:
         63:ee:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:40 2025 by rpki-client