Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa
File:                     4f652f12-1f12-317d-be7d-c15bfecc83d3.roa (raw, json)
Hash identifier:          XJYHD6jFWoQnX289GCZNbNAP+zNcem74GIUCEA2h69I=
Subject key identifier:   7B:B5:CB:8C:0A:93:C9:EB:F1:3B:5C:B6:24:A3:6B:F4:84:F6:84:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B5F37514000957ABD0AF48B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396826
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:51:40:00:95:7a:bd:0a:f4:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=71e72a96-d5c0-46a0-a337-6bd163da1b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:8f:d7:62:be:5d:29:3a:05:82:e8:90:77:
                    52:b5:66:7a:4f:44:e4:2f:f9:a1:da:00:d3:05:ac:
                    bb:c9:24:4a:d0:42:2e:94:3f:da:cb:6d:3b:30:7c:
                    f1:65:fe:7d:38:c7:fc:de:29:75:57:34:af:02:f3:
                    f2:e1:36:cb:c4:97:fe:e1:8b:a1:db:fe:dd:b7:3f:
                    bc:a8:54:88:25:92:02:f7:95:1c:28:e3:b3:62:c5:
                    ab:4d:ce:a7:d0:cf:12:08:d3:79:41:bd:ca:b3:e1:
                    03:97:e0:18:d7:2f:32:d2:57:8d:7e:67:80:59:53:
                    03:55:e5:6c:40:1b:1e:11:48:b8:99:6e:57:be:50:
                    b6:e3:e5:c3:d9:eb:97:b1:27:7b:2e:80:46:9e:9a:
                    11:9c:5b:76:ff:fe:74:91:ff:3f:c7:e9:9a:ef:a7:
                    63:69:78:e7:04:28:a8:dd:17:16:e3:b6:98:d6:20:
                    f8:7a:45:9e:47:d9:cd:1b:80:6b:82:fb:84:e2:a7:
                    f8:be:d4:60:da:3c:a6:7b:bf:1e:40:24:46:44:ce:
                    e1:5e:0c:a3:7a:a9:4e:d9:22:85:3d:c9:5f:80:b6:
                    35:b8:c1:39:07:0e:1b:c6:af:75:a5:c1:76:e9:c4:
                    14:9e:4e:66:67:6f:f6:41:0d:21:5b:30:dc:a2:32:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:CB:8C:0A:93:C9:EB:F1:3B:5C:B6:24:A3:6B:F4:84:F6:84:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f652f12-1f12-317d-be7d-c15bfecc83d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:26:fd:4c:23:48:09:29:b9:09:9a:87:c6:ee:f7:6a:92:58:
         a3:38:d3:1e:27:32:0d:d0:c4:98:1a:26:f3:e7:47:98:37:92:
         5d:3f:17:91:88:88:53:0d:c5:e5:67:3f:88:82:4c:d8:55:c0:
         a5:03:7b:53:83:b7:09:da:6b:7b:47:9e:e7:37:c1:10:74:60:
         7c:4e:f1:86:ae:11:3e:3c:0a:38:59:16:2d:80:6b:cb:1a:ae:
         53:16:27:d9:8e:96:6e:6f:f9:83:91:b3:cc:38:31:f6:45:40:
         86:08:3b:43:eb:71:46:18:78:d4:b1:fa:72:7b:6e:01:5e:64:
         18:2a:61:69:08:4d:38:73:a1:d2:30:e4:5c:ba:a7:f5:c0:c6:
         73:ed:b2:cc:7a:4c:d4:3b:d9:bf:dc:2a:bb:5b:92:52:3c:fa:
         bf:96:50:5a:05:44:f8:8e:32:05:53:1c:26:86:da:b4:8a:4f:
         6e:ab:33:36:78:a6:01:f4:d5:26:7d:b9:ae:f4:0d:ea:c8:c8:
         74:97:35:5c:e4:7b:46:e0:b5:f9:a0:35:60:ac:6f:4e:ea:f0:
         2d:26:48:67:e3:f6:cc:4c:86:35:6e:c7:93:20:36:fb:6e:09:
         51:81:35:e9:9f:29:86:19:f0:5b:97:24:a4:57:34:56:84:53:
         f6:52:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:58 2025 by rpki-client