Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f55ab1-a06f-3992-8abb-f28e3e127001.roa
File:                     03f55ab1-a06f-3992-8abb-f28e3e127001.roa (raw, json)
Hash identifier:          Gyz1cxiPyaSOJMJ3wnolRu9NbWKLqrKh6oynaXYMIJ4=
Subject key identifier:   88:73:68:4C:A9:DE:56:9E:74:B1:C2:70:D0:3D:E3:53:20:91:79:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D5951B51C3A7AA885E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f55ab1-a06f-3992-8abb-f28e3e127001.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396575
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d5:95:1b:51:c3:a7:aa:88:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=8b349fad-2bfa-40c2-82ec-94fc3a47924b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:38:62:b7:0d:3f:93:fa:c0:b0:9e:d0:df:
                    67:80:52:f2:2b:72:bf:92:89:94:ef:01:1a:f3:37:
                    ef:46:c5:d3:67:fb:94:75:ef:9a:47:3c:d7:7a:0e:
                    8d:26:da:f5:37:59:1c:7d:03:af:c7:ff:92:1b:64:
                    45:76:20:21:25:35:87:4b:8c:a5:91:27:9c:8b:23:
                    fc:6b:ad:d0:6e:2a:33:2d:73:c1:44:f3:db:9b:52:
                    d5:6c:36:28:d5:77:4c:c7:38:c5:72:10:04:63:49:
                    87:c8:94:96:38:be:db:02:31:ed:88:77:1e:fd:42:
                    0c:0e:0c:9f:3a:49:29:03:2f:5c:11:af:73:b4:b6:
                    6d:83:d1:64:88:1a:1a:8c:f2:d5:ce:80:c1:ef:2a:
                    da:3c:52:97:47:34:4e:ad:b1:6b:88:af:51:df:d9:
                    6d:ad:29:13:09:8c:7e:c6:0b:7e:31:85:7c:f6:74:
                    d8:31:8d:58:46:d6:df:c4:01:ae:7d:7d:d7:5f:60:
                    e7:92:17:08:78:2f:e9:3c:a4:39:3a:58:40:35:39:
                    1f:1e:cf:c2:b8:28:40:59:c0:8e:b4:f0:e4:d9:49:
                    99:83:e9:35:9f:23:74:31:e0:c0:0c:83:10:bc:35:
                    90:f3:44:12:61:7e:a5:e4:87:a5:ec:84:7b:2b:b2:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:73:68:4C:A9:DE:56:9E:74:B1:C2:70:D0:3D:E3:53:20:91:79:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f55ab1-a06f-3992-8abb-f28e3e127001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cb:6e:e4:51:b5:c7:fe:7c:d4:43:31:5d:da:98:5c:72:fe:
         f9:51:2d:00:e5:98:33:a3:ae:9e:73:9c:27:61:2d:1b:4d:06:
         f7:88:9f:a6:c4:56:5e:fe:75:0f:3b:6b:6a:99:3a:a8:fc:40:
         30:93:e5:58:ef:fd:86:f0:2b:ee:f3:4a:47:b4:a9:f0:71:8e:
         1c:c1:f0:92:8b:df:f0:70:fb:1d:f9:33:b8:00:e8:5f:9f:45:
         cd:d4:29:9b:e1:7f:dc:bf:0b:0f:a3:ba:a0:51:bf:60:cc:2b:
         6a:a0:b6:68:bf:39:84:78:49:d1:60:00:7f:78:00:94:df:0c:
         17:b5:ca:ab:2b:93:8b:f9:65:d1:31:f5:fa:df:8a:83:dd:5a:
         f4:36:82:ca:62:ef:9b:94:d9:78:e9:87:a2:6a:5d:bf:68:f2:
         52:38:03:23:93:6f:7f:b6:eb:1d:f2:9b:bd:f5:78:6b:d6:69:
         40:f4:ac:4d:4e:f1:5a:63:ef:aa:46:64:e8:03:33:a9:fa:61:
         15:40:e7:e7:73:8a:17:22:86:40:b1:5b:ae:25:0e:4b:0c:3d:
         b6:3d:d8:ab:24:8c:09:c4:ce:88:39:79:c1:b4:8d:6b:43:db:
         dd:06:83:14:a2:fc:a7:f3:a8:1c:e9:da:c4:2a:f0:c3:30:4a:
         39:ef:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:44 2025 by rpki-client