Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4981b8c6-4ffe-3319-a2f6-725b4f346d17.roa
File:                     4981b8c6-4ffe-3319-a2f6-725b4f346d17.roa (raw, json)
Hash identifier:          7cTHLFHBncM+UyZkv6j2zNz7GSPr0OxQriEVz2j4WpM=
Subject key identifier:   F5:7C:0C:18:27:04:75:98:97:C0:3C:34:D9:63:CB:64:F1:92:27:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D49878B067EF8E903040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4981b8c6-4ffe-3319-a2f6-725b4f346d17.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     36619
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d4:98:78:b0:67:ef:8e:90:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=f4f82777-abe0-4a27-9ca9-5bc36060c506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:6d:ae:1b:be:59:0f:f0:21:92:d7:4e:68:
                    fc:cf:70:c1:06:ff:e8:29:59:f9:ac:a5:94:44:51:
                    65:3f:79:6e:ff:1e:55:d0:95:32:65:71:cd:23:a3:
                    6e:83:64:04:cb:67:b9:81:be:a3:79:3a:1a:00:69:
                    9f:e2:52:7c:4d:e9:13:58:02:09:94:e3:46:41:7b:
                    38:32:c3:17:0f:5f:e5:d9:ce:db:06:ed:8e:a2:44:
                    07:f0:3b:8a:b0:50:f9:76:9f:01:14:4b:7b:29:43:
                    0d:35:2b:df:83:ce:d8:09:5d:3f:9a:aa:9b:ce:57:
                    f8:2a:c4:21:45:47:bf:5d:7c:86:bf:d5:8a:e1:bb:
                    9d:bc:34:9f:e2:df:5e:22:64:2d:d2:44:49:f2:dc:
                    3d:78:77:13:08:82:60:d3:20:58:88:f5:7d:0a:bd:
                    51:9a:62:a8:e2:d4:1a:e7:ae:a6:bc:47:b2:1e:c1:
                    c2:80:0e:14:30:06:2d:62:68:b1:5f:f6:ff:52:44:
                    b4:e5:62:f3:ec:95:eb:7e:ed:3f:00:29:15:45:14:
                    65:9f:ed:70:5d:2c:75:91:09:33:0c:83:66:e7:d8:
                    97:f1:0a:df:96:4a:0f:29:5d:da:dc:a6:97:d4:cd:
                    be:f8:8b:83:d4:de:e9:a9:ee:b9:39:c3:5e:87:f6:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:0C:18:27:04:75:98:97:C0:3C:34:D9:63:CB:64:F1:92:27:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4981b8c6-4ffe-3319-a2f6-725b4f346d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:da:fd:c5:68:5d:79:ac:c2:63:67:36:73:a2:02:cb:9a:
         e6:dc:49:6a:a2:d5:4e:67:e9:10:ec:05:06:d7:af:f9:1e:64:
         4c:fd:d9:62:ef:35:67:58:f0:e7:a5:65:d2:46:09:46:af:b6:
         c4:87:71:f2:51:c0:b4:93:b1:d6:e9:d3:60:4b:d5:55:99:50:
         c6:10:99:07:80:93:62:4c:e0:0a:8c:be:e9:1b:6b:0f:b5:f1:
         c8:c8:bf:6a:4d:77:79:f3:8a:1f:4b:c0:58:60:d2:c7:ca:56:
         9e:1d:ad:38:d4:8c:e9:96:3b:b9:fa:c7:3e:2a:88:79:8b:e8:
         81:42:7d:47:93:a1:a1:72:71:0d:a5:1c:e4:2e:c2:c9:c5:50:
         4a:fb:37:a0:e1:f5:fb:8f:80:79:17:78:ad:25:18:4c:2e:d2:
         07:1a:bf:f5:9c:8f:1f:1e:0d:c3:60:9e:e8:65:93:db:c1:55:
         0d:34:a8:ab:e2:06:b8:85:a4:82:7b:c6:4e:1d:b1:47:21:e8:
         31:45:e5:49:ac:74:59:66:2f:34:13:64:27:a7:9d:1d:41:c2:
         6d:29:22:bb:c1:cd:de:50:84:2f:6e:58:ab:53:6d:2a:91:43:
         e0:23:8c:e6:5d:28:43:e7:f7:0e:f3:43:04:aa:bb:6f:e4:5c:
         bd:32:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:22 2025 by rpki-client