Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ce1c45-4603-3b76-ad49-fd9769a10f88.roa
File:                     52ce1c45-4603-3b76-ad49-fd9769a10f88.roa (raw, json)
Hash identifier:          Q7ON4ERBRl2l1uDXmkZOv0/cvBzugYVtAgWC1Z731aw=
Subject key identifier:   0F:8D:AF:D6:85:13:B1:D0:5F:05:99:44:17:0B:FD:D8:EA:EF:BA:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D684B49CDDADDCC79D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ce1c45-4603-3b76-ad49-fd9769a10f88.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d6:84:b4:9c:dd:ad:dc:c7:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=e289cfd6-c792-47b8-8b3a-f2667dd5cfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:88:eb:95:60:16:94:6b:b9:48:c9:26:9d:
                    80:6b:e7:22:41:48:3e:83:82:92:46:9d:c5:66:af:
                    da:43:ff:95:87:ec:4c:e6:49:cb:fe:c8:c8:8c:83:
                    6d:c9:8f:97:4e:9a:f3:e2:69:da:92:c8:1d:82:2a:
                    c9:c7:4b:32:12:94:fb:0d:3d:71:14:6f:6b:a5:62:
                    b1:23:6e:ee:4c:28:10:41:08:d4:88:68:ee:5f:4f:
                    44:78:9e:ff:77:81:bc:a1:39:d6:4a:a6:ad:05:0c:
                    28:e7:da:0a:ff:71:5a:03:b5:b5:49:c1:27:2a:89:
                    b1:80:dd:0f:53:99:2c:e8:d7:b7:91:67:5c:26:a1:
                    29:0b:ad:ab:5c:8e:fd:7b:b6:04:f0:b3:ea:18:5f:
                    53:86:b0:63:74:d9:d1:e0:21:80:2f:28:90:64:bf:
                    8f:ff:d3:54:30:46:e8:e6:ad:f2:2f:0b:78:68:55:
                    36:7f:77:d1:b4:c0:e6:8b:51:8d:c6:29:d0:93:52:
                    c8:45:14:2b:bd:e5:c8:8c:5a:6d:a8:f3:3b:49:2a:
                    b2:c7:40:b9:2d:ad:a1:60:17:61:d6:65:c0:93:26:
                    8c:ec:a8:da:43:fb:83:3b:52:f2:86:6e:5b:72:69:
                    c3:dd:18:4a:91:dc:43:ef:c1:b4:15:e2:13:78:a6:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8D:AF:D6:85:13:B1:D0:5F:05:99:44:17:0B:FD:D8:EA:EF:BA:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ce1c45-4603-3b76-ad49-fd9769a10f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:76:20:12:65:1b:b6:eb:b8:86:90:ab:dd:1e:85:ab:ba:1a:
         bc:bc:54:ef:92:61:67:28:d0:e4:eb:71:db:0c:12:69:5d:f2:
         14:da:4c:21:64:13:ac:2c:bc:0d:d4:f3:f5:4b:33:f4:5c:d5:
         20:79:6d:8f:92:c8:7b:06:d5:fc:e3:a0:a6:a6:92:b8:39:ae:
         a0:98:4b:36:f8:05:22:ec:c7:e1:d9:24:3e:a6:6f:86:bf:a9:
         bb:62:bf:2e:1b:c7:95:46:72:36:56:35:f8:ce:ad:3d:c5:e1:
         91:5b:5d:fc:9f:e0:d6:1f:40:a3:2d:81:4a:6b:35:76:b9:6b:
         2f:46:b0:af:4f:d6:f6:97:b1:f3:a5:af:78:8b:ef:f3:2a:fd:
         e2:67:26:b4:0b:ed:7e:0b:37:b2:b0:60:66:20:f0:d3:03:0d:
         82:62:95:e9:a6:72:68:5c:c3:bf:81:ea:55:40:1e:fc:dc:55:
         30:1b:ae:ba:1e:fb:bf:f6:6b:d2:80:8f:fd:16:81:a6:01:3a:
         59:b1:97:e3:c1:a9:d7:22:62:dd:ea:45:9a:25:fd:51:b4:ff:
         27:d2:6e:66:67:bd:b8:eb:d8:64:12:c0:0e:25:e5:24:61:17:
         bd:8f:79:e0:8c:85:ee:f7:bf:05:22:60:3b:e0:99:5e:46:ba:
         ef:57:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:30 2025 by rpki-client