Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15c008e8-44e3-3b9f-a160-dabc76b44932.roa
File:                     15c008e8-44e3-3b9f-a160-dabc76b44932.roa (raw, json)
Hash identifier:          7NA4f0WXaEEhqWvuaDT3DnquDqsxfesSETj6r1nilj8=
Subject key identifier:   49:96:A2:0F:30:37:49:51:F4:C7:4F:50:9A:2F:E7:CC:D6:DA:6E:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D93E5CBE92031BB8D740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15c008e8-44e3-3b9f-a160-dabc76b44932.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     397195
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d9:3e:5c:be:92:03:1b:b8:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=bf7f0890-c129-419e-8ab2-08b7b3ae1e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:ba:d4:a0:19:84:b7:0a:e7:4e:c8:87:0b:
                    fa:4a:dd:12:f3:f7:c2:62:4f:4b:18:d3:e0:7a:c9:
                    e3:40:a9:c5:53:f9:18:e4:4d:79:ff:c8:78:22:a1:
                    07:ea:71:76:bb:08:10:03:dc:be:6e:1c:6d:4d:e1:
                    e1:7e:f1:d3:be:4e:8e:67:e7:94:ee:60:f1:b2:b3:
                    54:ce:7d:e2:b9:57:e6:3d:9f:89:56:29:9b:d8:34:
                    fc:a4:b8:08:c5:6c:1a:6c:a1:08:b2:dd:bc:61:51:
                    13:c4:d2:c9:ba:d3:ab:3f:0b:fa:4e:c2:82:29:1d:
                    4f:3d:84:36:61:66:48:55:27:2e:e5:06:51:e7:e7:
                    e8:5a:17:e2:61:7a:08:9c:c9:39:6c:58:c9:68:f6:
                    fc:1a:a1:a5:f8:6d:3b:3a:67:6d:c9:83:9e:e5:cc:
                    a0:ea:fa:e7:a5:ed:82:2b:53:82:a1:16:ba:71:b6:
                    3d:fa:e3:d0:b6:c1:76:d6:5b:65:30:24:9c:cf:2e:
                    a6:2a:59:e3:7d:d8:f6:ea:82:30:77:f0:d3:63:9e:
                    f4:09:4f:fe:b4:c1:7a:87:35:fc:af:a5:ea:f2:3b:
                    21:76:27:0e:49:df:4d:d0:d2:38:04:7a:69:23:05:
                    81:4a:3d:33:47:e2:55:94:c6:a2:28:b0:18:b3:5b:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:96:A2:0F:30:37:49:51:F4:C7:4F:50:9A:2F:E7:CC:D6:DA:6E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15c008e8-44e3-3b9f-a160-dabc76b44932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:2f:95:e3:56:31:81:88:0f:ec:3a:5b:8a:e4:28:5e:a5:
         65:69:b4:fa:99:ae:a6:15:c0:62:b6:e6:e5:e3:94:82:1e:23:
         2e:5f:83:ba:df:5e:3c:e8:0d:96:4e:28:ee:ec:90:7e:21:30:
         a7:d5:26:50:3e:86:ae:98:fd:f0:f2:bd:74:6a:48:ff:be:b1:
         ab:a3:e9:46:db:cc:f3:04:e7:cd:07:0a:aa:b8:4f:0b:fb:b7:
         6f:33:5d:db:d2:33:6c:cb:79:6c:ae:5a:69:47:73:ff:cd:da:
         cb:0f:aa:f5:2c:4d:14:ec:ba:b6:b7:bc:de:2c:69:60:15:54:
         34:36:3d:10:a2:6d:fe:92:e1:3d:d2:33:1a:58:f3:96:1e:22:
         96:6b:ee:91:7a:7a:4e:58:87:19:8f:ab:19:0e:92:bf:c1:30:
         8d:28:9e:98:44:ad:bb:f0:2f:c9:8a:bf:27:d7:1c:72:63:86:
         d2:6e:f3:05:cf:bc:09:0e:d2:08:64:35:be:25:36:3e:23:79:
         48:c8:a2:2e:58:a3:3c:f4:b7:19:bc:e7:93:77:00:91:02:ee:
         ba:76:a0:bc:66:e0:54:4c:7c:c4:b6:84:85:76:11:0f:61:41:
         12:47:5e:74:95:ad:83:b9:77:46:f2:1e:66:fc:3c:82:59:e5:
         30:78:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:51 2025 by rpki-client