Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
File:                     eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa (raw, json)
Hash identifier:          zNlPXoyYz+r9g+tcu9hZcuNQ9oTrLCZtK0NwKAKPh4A=
Subject key identifier:   23:22:A1:40:42:C4:38:2C:90:27:68:9A:49:AA:9C:16:E8:BB:FE:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09D349B1600815100F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396589
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9d:34:9b:16:00:81:51:00:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=4b108f7e-8eef-4d59-a080-de333e4828bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:02:33:8e:53:21:97:7e:ff:ff:b3:39:8c:
                    52:be:66:c3:b7:04:78:95:59:1e:16:5e:46:f1:3b:
                    79:22:9a:07:a3:be:06:1e:86:70:ac:9b:dc:ba:3b:
                    42:d6:ef:be:66:be:32:d6:de:45:bb:cb:6c:cc:6c:
                    5f:ba:7b:67:c8:58:82:33:9e:97:67:64:ec:a4:8b:
                    6b:4b:16:84:e9:21:19:3b:48:54:d8:f5:2b:67:05:
                    6f:ca:b2:a7:4b:83:c7:c8:9f:79:96:96:1c:b4:b3:
                    af:0b:88:55:df:26:54:af:be:6e:d6:24:f6:6e:a4:
                    38:34:9b:09:8c:f5:a4:0b:40:2c:27:e0:e9:c6:8c:
                    7a:4e:d4:e6:69:45:23:5e:7c:77:c9:30:86:3e:b4:
                    da:c0:05:ae:ff:d5:80:58:b0:1a:fe:d7:7c:54:58:
                    0b:a5:1a:89:d0:8f:e6:02:91:35:68:f1:26:70:5c:
                    4e:58:9e:0f:60:31:1a:41:01:47:45:f3:f8:5b:65:
                    71:7e:6f:c6:cc:09:98:2f:15:cf:7e:21:8c:f8:3d:
                    14:1e:1c:7f:53:8b:a5:8a:ba:e3:f7:58:1f:d6:3b:
                    d6:e3:f7:6b:2a:a5:6e:29:22:4f:b0:55:19:b5:c9:
                    2d:c8:1f:84:0c:c3:05:aa:3b:d0:b5:8c:04:90:6e:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:22:A1:40:42:C4:38:2C:90:27:68:9A:49:AA:9C:16:E8:BB:FE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:39:e9:99:38:4f:c8:e5:1f:5b:b1:86:ac:1c:99:f4:ce:
         82:c5:3e:45:8d:5d:3e:27:a5:1f:1d:df:03:23:ec:e4:0b:73:
         f0:3f:74:3f:f0:5f:97:ce:9b:6f:45:2c:9c:4d:dd:8b:41:f2:
         55:e9:9d:ad:b5:6f:d9:c4:a9:8b:83:c5:c0:da:fd:61:fa:5b:
         87:19:35:13:82:7c:4e:78:09:fc:0e:3c:3c:e0:3d:9d:46:a2:
         59:1d:bf:fb:36:e8:52:3d:d1:82:83:a0:50:f8:a2:ce:ad:3b:
         f1:1c:c6:69:82:86:87:56:7b:65:ee:4f:46:b3:f4:42:a1:5f:
         17:c3:02:c5:e9:f5:5a:bb:4b:1a:79:94:b6:ae:65:55:b5:c6:
         af:d4:08:17:09:af:3a:42:d7:02:cb:ff:45:cd:f6:82:6b:39:
         23:e2:ea:8a:1c:99:96:4a:6e:60:d1:af:b0:fe:96:60:2d:b8:
         34:60:86:5a:9e:2c:df:10:da:4b:55:70:19:0c:db:d8:9b:9d:
         ba:fb:c2:39:65:3f:ac:31:45:79:fc:10:cd:34:c5:84:01:e0:
         dd:26:9b:63:f7:69:dc:77:20:0f:49:58:97:ef:1b:cf:d7:49:
         16:69:48:03:76:7f:81:a7:4d:ce:fd:64:0a:bd:02:4b:3b:4f:
         3e:2d:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:10:53 2025 by rpki-client