Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa
File:                     47d1cdc4-2974-3633-8fbc-02664a883456.roa (raw, json)
Hash identifier:          /IzzlI74Zrq4gdMQO3Pi7yyzJH3vMo+hdksN3SATvQc=
Subject key identifier:   89:10:E5:87:0D:D8:24:2A:E5:C0:54:70:17:E2:22:61:00:2E:5C:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC67F6E4177DFE503DA900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396549
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:67:f6:e4:17:7d:fe:50:3d:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=66caa114-a5d8-416a-8377-09a04d74b977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:2a:af:1f:42:8b:01:9f:f8:34:68:35:b4:
                    28:52:ba:63:ba:28:e3:ca:e6:b5:a5:a6:7e:32:17:
                    62:bc:90:7d:d7:bf:e2:87:e1:2b:5d:81:6e:db:27:
                    f2:23:68:7b:47:fa:2b:1f:b0:b0:b8:1d:54:49:e6:
                    04:c2:23:49:39:5b:1c:7b:cd:97:af:55:46:b2:32:
                    72:42:cc:09:58:49:f0:1c:8d:fb:3f:c7:c6:d6:5a:
                    c6:e3:44:61:4b:92:9b:ab:bc:2f:4a:eb:cd:ea:cd:
                    ed:2b:13:b0:d4:8b:cd:fb:43:a6:fe:3d:b8:bd:69:
                    2f:73:f9:fa:8c:18:1f:3b:06:71:5e:06:c9:2d:c1:
                    d9:8b:8f:bb:61:5f:9a:77:17:0e:23:81:6e:a6:2e:
                    d8:ab:73:43:12:6f:53:69:c4:01:a4:fb:91:e4:de:
                    fc:2d:8b:93:df:89:46:13:80:9d:7b:2b:81:20:fd:
                    87:5f:74:3e:89:21:b4:aa:51:6d:08:f5:18:7b:0f:
                    c9:2b:36:25:d1:0a:6e:fe:48:26:31:7f:bb:5f:8b:
                    04:a6:c5:66:a3:7a:ad:3e:0a:be:e0:80:42:ec:dc:
                    bc:86:b8:40:cf:1d:4d:27:da:4a:1d:db:74:73:c7:
                    ab:69:3a:eb:78:2d:8d:16:59:81:4c:f6:9f:2f:12:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:E5:87:0D:D8:24:2A:E5:C0:54:70:17:E2:22:61:00:2E:5C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:81:c9:0d:64:87:34:91:59:e9:d7:d4:64:a0:19:e5:4a:57:
         04:3b:5b:af:80:05:d3:a8:52:f8:a4:8b:26:d1:71:76:f0:c6:
         6c:ed:6e:6c:1c:bf:9a:ef:87:57:ee:c5:7c:96:64:1a:50:b1:
         17:41:d7:9a:37:10:34:29:ac:de:af:c8:6d:86:77:9a:5b:b7:
         bf:49:d7:1a:81:14:8c:b7:c7:11:8a:96:16:ab:0e:f2:c7:6e:
         89:11:eb:21:c4:cb:df:08:a9:53:1d:b0:df:ae:87:9b:82:0e:
         d2:9a:2d:dc:4e:8d:c3:12:c9:a8:83:a6:37:8a:f3:c9:f3:32:
         e2:c6:04:92:75:4e:f2:62:22:03:48:08:26:5d:7c:7e:d0:c6:
         0d:80:b1:33:7f:d7:20:bb:cf:3a:f8:83:c5:3c:28:43:f7:61:
         d5:6a:72:43:65:4b:cd:e1:d5:5b:62:bf:6a:8b:d5:e7:69:22:
         63:5e:56:a1:5f:49:fd:71:ed:d4:3d:b3:a5:1a:d5:7b:6f:70:
         5d:f9:d7:5c:78:39:12:00:1c:ef:a4:e2:d7:f7:d8:17:db:c1:
         57:4d:9a:d6:43:f5:8e:fd:7a:16:eb:94:e5:df:7f:b0:53:3d:
         d4:a8:6a:93:07:1a:25:6d:44:0e:5e:02:c6:c9:71:80:27:74:
         86:ea:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:56 2025 by rpki-client