Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84cf765-97fd-37d1-8e07-f692d6950e40.roa
File:                     f84cf765-97fd-37d1-8e07-f692d6950e40.roa (raw, json)
Hash identifier:          bQMfRgFVb8AIAv+dn+lxQyNqu9tYfsPAtIwVgRTGmxM=
Subject key identifier:   75:18:3C:3D:ED:F9:69:00:AE:28:BA:6E:DB:A5:97:C6:53:2C:00:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09E20F5B85EB91C416700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84cf765-97fd-37d1-8e07-f692d6950e40.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     397199
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9e:20:f5:b8:5e:b9:1c:41:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=547107f0-61d8-432f-981a-14311b56afcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:3c:79:b7:b1:d9:4c:71:a8:c4:dd:b8:d7:
                    6a:0c:cf:20:ea:50:e1:ef:1f:e4:b5:7e:0e:f6:4e:
                    bd:a0:1a:92:95:c6:11:d9:12:24:23:7d:70:56:48:
                    62:3e:d0:e8:71:10:6a:c6:d2:5e:ff:d0:23:db:da:
                    7b:3d:75:85:cb:8b:58:b4:cc:76:3b:d7:e1:86:f8:
                    46:07:86:1b:cd:e1:66:d0:61:41:f0:53:6f:e8:c6:
                    4b:cd:28:1a:d1:1b:35:b4:ce:e1:91:df:07:9c:14:
                    f1:9d:9f:c5:ce:af:a7:07:41:bd:14:14:e2:dd:2d:
                    0e:bf:a8:e3:d6:32:5b:7e:13:6d:88:b5:44:a1:d2:
                    7f:51:0d:af:55:f7:c9:0c:d4:58:a5:a3:85:9a:ab:
                    fa:30:dd:1c:6b:be:3c:6e:95:b5:77:b5:8e:ef:da:
                    11:c1:b3:bd:18:6b:d4:54:ab:28:4d:10:19:81:0b:
                    36:fa:2c:be:92:c1:bb:44:ec:25:fc:b4:d3:28:f8:
                    30:39:d5:2f:01:70:66:e8:fa:41:66:ff:e2:08:79:
                    f0:49:4b:04:f7:96:73:72:38:12:45:9a:62:14:5e:
                    df:84:d1:32:7d:dd:6f:66:df:a2:6c:a0:a0:58:23:
                    1d:66:05:de:3d:f6:46:ff:d1:04:dd:81:c7:19:27:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:3C:3D:ED:F9:69:00:AE:28:BA:6E:DB:A5:97:C6:53:2C:00:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84cf765-97fd-37d1-8e07-f692d6950e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:d0:ef:20:b0:ef:dc:10:47:39:1e:69:e8:36:e3:c7:0a:
         47:fe:9d:15:41:5f:aa:67:2b:0b:d4:ed:5c:8f:84:79:7c:5a:
         0a:3a:85:3b:fb:af:ea:05:0b:6d:64:69:50:2a:fe:d8:2a:86:
         75:a6:a6:65:ea:08:07:94:52:d4:86:87:e9:43:3b:7c:77:a9:
         1d:70:d0:af:5a:6e:2a:f5:25:04:cd:7b:e4:48:4f:7b:55:df:
         6d:c8:34:0e:1b:9b:a0:38:3f:0c:99:cb:b4:91:7a:ab:3b:fd:
         82:62:99:2b:f3:64:1c:ae:f1:d2:d6:00:35:06:b1:b9:03:25:
         e3:d4:e3:1d:dc:1c:99:53:c9:ea:6a:9d:eb:00:22:9b:cb:64:
         74:8e:da:ea:35:50:67:3b:5c:30:43:87:88:24:ff:46:a9:d3:
         77:6d:2c:6e:af:0d:3d:72:54:cb:1d:85:3a:9c:fb:dc:20:79:
         d6:8a:fc:e2:a4:75:53:19:00:39:42:00:5c:a6:b6:6e:76:dc:
         f5:28:54:c2:63:40:51:10:22:64:90:c2:0d:aa:84:2b:66:69:
         b7:9c:d3:48:45:c6:03:7f:ef:fc:1f:3a:1e:8e:2a:d3:dc:4e:
         3f:91:29:7d:5e:a0:4d:09:99:5c:fd:76:b5:e9:a1:eb:7d:e6:
         40:33:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:24:11 2025 by rpki-client