Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
File:                     10c9931e-5525-3a21-b16b-e79ee4edaeff.roa (raw, json)
Hash identifier:          U44UrOKsKSdddRWVD805iPajx8Mbif2cvVQcyLudd1I=
Subject key identifier:   C3:63:5D:EA:FB:3C:10:61:3D:6C:81:78:D1:28:EA:D7:C6:35:06:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6E9602EE759A2AD11940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396582
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6e:96:02:ee:75:9a:2a:d1:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=2d93d62f-338d-4c67-b929-4dbe7d6ea002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:32:5c:09:b3:be:41:fc:88:0d:31:2b:de:
                    60:6b:8d:19:97:02:ea:aa:60:26:f6:a3:7d:1b:7d:
                    45:6d:48:2b:12:9f:6d:7d:dd:19:6a:51:2c:dc:e4:
                    2b:9f:69:31:51:bd:96:e0:a6:ac:7d:43:62:4e:f4:
                    3f:20:4b:8e:66:30:27:77:4d:b3:d1:3d:9e:7b:3e:
                    f0:a4:c4:33:8b:55:66:e3:56:c0:6f:59:9c:e3:3d:
                    96:f3:05:3e:a0:56:1e:9d:c9:34:eb:57:71:22:d2:
                    38:6c:2b:50:e1:f7:95:eb:99:8c:6f:c2:23:72:c7:
                    ef:d1:59:b4:d3:b1:57:1e:e3:ea:9c:ff:45:f2:bf:
                    f5:df:39:7f:81:b0:92:52:ee:90:98:d3:4f:7f:73:
                    67:19:61:bd:6f:fc:ce:06:94:20:22:38:5a:63:da:
                    6a:c5:c4:43:4b:4b:fa:dc:eb:51:60:33:cb:1c:05:
                    78:05:c8:ed:c8:5e:f8:4c:d6:8f:55:f0:bd:cc:63:
                    f0:db:80:ff:0d:0b:14:a7:9e:8b:85:f4:bd:76:ac:
                    f0:da:fb:fd:ce:a9:71:1f:64:ce:bf:83:e5:c8:f5:
                    3a:87:2a:66:01:d4:b2:76:86:2a:d7:86:fa:12:e4:
                    49:da:ce:27:50:1d:58:59:36:9c:1f:f0:72:86:35:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:5D:EA:FB:3C:10:61:3D:6C:81:78:D1:28:EA:D7:C6:35:06:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:33:e8:bc:a9:ce:67:bc:65:85:b1:66:36:c3:14:1a:51:94:
         94:3c:2b:b9:a6:ca:a0:06:36:08:67:00:8e:02:53:60:0b:0a:
         bb:34:a8:07:e6:a6:fa:51:b4:4e:7f:af:83:01:43:d8:89:1c:
         d9:f4:f4:33:15:69:c2:9a:25:48:4c:64:04:fc:d2:b3:b0:1f:
         b6:54:d4:49:d8:f2:fb:db:d3:11:65:18:6d:c9:7f:de:1f:88:
         0c:0e:92:e2:cb:ed:94:82:02:45:eb:b2:af:6f:b2:58:66:a5:
         02:16:94:aa:52:9c:e5:96:ca:92:37:94:43:6b:78:0a:05:ee:
         69:83:5a:0f:02:00:6e:30:bb:88:c8:cd:92:84:12:79:1c:bf:
         1b:a4:90:87:09:b7:12:f0:a6:34:5a:4d:1e:39:ef:cd:6e:08:
         5a:ed:29:95:2d:2e:1e:3f:32:70:05:19:da:cd:b1:51:f6:8e:
         dd:8b:0a:7e:4b:37:7a:67:a8:4b:cb:2f:dc:19:5d:35:70:e3:
         5e:62:db:11:ef:25:c7:21:98:78:16:44:4b:56:9a:bb:60:28:
         94:50:9c:25:7e:6a:0e:2d:89:79:a2:0a:c6:5f:4e:68:6b:3c:
         39:95:52:49:a8:7b:f6:5d:93:dc:9e:df:24:74:e3:3a:71:f2:
         fb:c9:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:35 2025 by rpki-client