Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e265aa-df75-34de-9098-70a868b41935.roa
File:                     e1e265aa-df75-34de-9098-70a868b41935.roa (raw, json)
Hash identifier:          qOLFLhdcJ8xx5YOVNwGh7CCb0hjGBX/u31EP67ml11Q=
Subject key identifier:   D8:C1:D7:E6:32:4C:6C:F9:55:75:1D:80:DD:57:1A:0D:EE:03:C8:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09E91B26617509782FA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e265aa-df75-34de-9098-70a868b41935.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     36624
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9e:91:b2:66:17:50:97:82:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=b2cb4ebf-0ae8-4a6f-af8d-df4150f80a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:f6:87:e2:e3:f9:00:9c:47:d6:40:77:07:
                    ed:32:38:33:d6:d3:1e:0a:80:28:7c:ab:21:1a:93:
                    9d:dd:1f:5e:a8:10:b1:92:b7:cc:0a:9a:74:cd:30:
                    5a:2b:b1:d3:b6:d1:5f:ab:c5:f8:0f:65:18:dc:b8:
                    8e:d8:dc:17:38:c0:17:83:71:f7:a4:a3:ba:5c:03:
                    14:a7:f2:1a:d7:0d:be:3e:76:b5:29:9a:3b:1a:5f:
                    81:23:1c:03:9c:d7:e4:90:89:e8:c9:8a:ec:a4:da:
                    58:04:1a:4b:bb:4a:9b:8c:48:64:d1:3e:f5:42:69:
                    a6:1c:89:eb:60:09:6a:27:2f:a0:9f:d5:97:97:e4:
                    39:7f:de:0c:47:64:38:66:5b:ef:42:8a:f8:d5:b0:
                    fc:67:41:9c:ed:2e:e7:fc:84:e7:cb:a7:5f:58:87:
                    4b:05:31:04:d1:3b:09:79:98:f6:2b:60:f3:b2:0d:
                    a3:08:3b:49:5f:f0:94:5c:ad:48:b7:77:19:35:bb:
                    b4:b5:93:0d:b6:5d:d7:ef:33:18:29:a3:99:e7:cf:
                    9b:42:a4:4f:d0:f9:cb:6d:10:ce:2d:1e:46:37:4d:
                    08:ba:18:c8:8c:a3:45:2e:6a:48:e2:8d:ea:cd:5d:
                    4a:36:45:a8:04:f8:9f:05:1f:ec:6d:91:1f:d1:01:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:D7:E6:32:4C:6C:F9:55:75:1D:80:DD:57:1A:0D:EE:03:C8:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e265aa-df75-34de-9098-70a868b41935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:94:0e:e1:0a:8d:65:61:28:54:02:ff:73:99:cf:8a:3a:
         85:ad:db:e5:e0:67:1a:81:a9:ef:fa:e4:6e:b1:53:c6:7a:c0:
         8f:0b:ae:a0:b9:b6:e4:1a:60:94:c0:32:be:4c:93:28:c8:b4:
         43:af:19:54:8b:fd:c2:aa:4d:31:e3:12:f2:d9:c3:33:d4:80:
         64:24:95:a4:ea:33:3a:f3:18:ea:b2:9c:bd:5c:6d:24:0a:17:
         62:22:c3:38:9d:6c:3d:23:6d:f0:55:ed:a6:32:78:a4:9a:2f:
         f1:49:9d:68:52:e4:61:0e:9b:91:b2:19:1b:2d:0f:c4:fd:94:
         51:ce:35:a3:86:70:7e:8e:62:66:63:7b:02:2a:95:0b:f7:dc:
         dc:e5:fe:b6:58:69:43:31:29:dc:31:8c:8e:e6:b3:19:bd:59:
         0d:17:75:36:3f:f8:13:a1:b3:fc:82:95:ae:44:77:5b:99:c9:
         7b:92:9e:76:3d:d9:d1:54:6a:9e:47:4c:be:8b:1e:5a:95:b0:
         7f:71:cc:f7:1e:22:8a:6b:76:9d:95:17:13:4b:66:e8:fa:0f:
         52:34:7e:fd:53:83:b8:36:c9:f8:7b:32:de:d2:8b:39:b1:53:
         9b:d7:10:e3:a8:93:c2:4e:07:0d:ae:f9:8d:fd:41:ca:ee:a8:
         b2:b1:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:05 2025 by rpki-client