Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0dd4be-0230-300a-a9a8-641e2b859646.roa
File:                     3b0dd4be-0230-300a-a9a8-641e2b859646.roa (raw, json)
Hash identifier:          vbLqFmgQtDhwGrllo5rLaXl9zYB8TLtr/ox23bon4q8=
Subject key identifier:   AA:20:0E:48:51:E0:0A:09:A7:FB:7C:A4:9F:15:57:98:1B:1C:C8:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D8CAEA975DD54FB63C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0dd4be-0230-300a-a9a8-641e2b859646.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     397208
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d8:ca:ea:97:5d:d5:4f:b6:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=15835207-d65c-4113-a190-9f475ca98ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:9c:59:ab:64:90:e4:71:0b:a6:8c:50:a8:
                    b5:15:b5:a3:cf:01:9c:32:b5:f8:49:90:51:35:70:
                    72:01:44:f1:ba:d4:d6:8c:e1:e6:9a:1f:89:78:16:
                    52:6b:18:d1:3c:cf:e3:a2:34:2e:2c:60:a6:d1:76:
                    bc:a6:68:4f:9b:1d:72:ea:8b:e9:7c:cd:df:db:06:
                    fb:71:15:c9:bd:5c:67:dc:6f:0e:1f:9a:58:24:76:
                    10:9e:dc:50:fe:e7:83:59:74:60:ef:74:9b:f9:48:
                    d5:52:12:c9:65:92:b7:64:c7:4b:76:9a:4d:78:7f:
                    61:b5:25:33:29:df:1e:4b:54:d7:db:c5:9c:33:9f:
                    be:79:29:b2:ba:8e:48:26:10:2b:b9:f9:cd:e6:49:
                    5b:35:92:09:af:cb:aa:f1:68:c3:d9:56:a2:38:b7:
                    7e:22:c1:28:3e:2e:22:87:6d:2c:7a:bd:0c:a4:54:
                    d9:cb:a4:64:68:f4:cc:e2:fc:fe:23:ed:e7:41:2b:
                    f4:e4:fa:5a:96:a8:56:9a:0b:41:bf:d3:e2:47:76:
                    58:47:61:4b:a7:01:9c:61:dc:93:c6:a7:46:c4:5e:
                    3c:cb:41:a8:90:1c:2d:bc:49:73:f1:b4:99:6a:f1:
                    25:5a:92:ab:56:a7:bd:20:26:e3:13:54:30:bd:ee:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:0E:48:51:E0:0A:09:A7:FB:7C:A4:9F:15:57:98:1B:1C:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0dd4be-0230-300a-a9a8-641e2b859646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:19:09:57:6e:67:74:71:c9:eb:ad:01:9c:4d:77:78:a0:
         23:f3:e1:ff:a8:1f:bf:81:ef:b0:54:a9:e5:7b:af:27:91:03:
         05:25:66:05:bc:89:73:f0:56:96:d6:e3:c1:15:bd:5d:83:cc:
         dc:2f:47:10:a4:d9:5a:79:d4:5e:6b:14:d6:2b:33:f0:1e:c7:
         1d:45:fb:44:ce:8f:57:ce:52:48:fd:b5:0a:51:ca:f4:40:c5:
         68:14:e4:e5:54:2f:08:d3:5e:5d:44:a5:e9:21:76:22:0e:41:
         84:5a:09:84:8c:67:bb:35:eb:8b:e6:93:e6:38:b9:6a:5c:49:
         93:fd:71:97:3d:6a:eb:59:44:f7:13:47:c1:2d:a9:3b:90:94:
         d9:83:6b:74:2e:53:71:99:4c:a1:63:7e:be:c8:41:81:97:be:
         64:ad:e2:a7:25:79:10:c6:ee:f7:84:8b:3f:17:26:72:49:a4:
         10:f6:72:2e:73:e6:fb:89:b7:13:d9:f7:26:8a:f6:2b:43:58:
         a5:02:f2:f0:05:49:ed:a2:d4:40:bf:fd:bd:a7:79:01:c4:c7:
         c9:ba:4f:52:72:50:9c:15:c6:91:fa:4b:37:21:cd:66:0c:82:
         ce:65:c6:9c:5c:a2:4b:de:77:09:ad:05:51:4b:d5:b8:21:73:
         1f:c6:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:13 2025 by rpki-client