Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56dbc61f-4d3b-36be-afe5-62c45705115c.roa
File:                     56dbc61f-4d3b-36be-afe5-62c45705115c.roa (raw, json)
Hash identifier:          aG8/AkD92Faqz8CnRXmj8su79UfxPyt9a9cPNx6r8vE=
Subject key identifier:   3B:E6:DC:94:B9:4E:45:31:75:C0:A1:D9:67:FA:70:74:81:41:30:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6B179087F8341695C900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56dbc61f-4d3b-36be-afe5-62c45705115c.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396560
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6b:17:90:87:f8:34:16:95:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=d7072efe-6842-44eb-85bd-fc80ca2dfc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:28:2d:8e:0a:66:3a:24:6a:1b:9c:6e:c6:
                    f1:f5:40:3d:80:af:b1:8a:0f:0f:71:56:61:58:20:
                    73:0e:20:e2:5b:08:27:b3:8a:e2:a2:db:fa:84:f1:
                    7c:3b:7e:80:8b:d4:7c:a7:55:d5:a0:83:c4:da:6c:
                    ff:1a:c3:81:ab:c0:0d:84:ec:7e:af:ae:ff:0f:1f:
                    34:e1:de:b3:48:fe:51:b8:e1:b0:00:c4:c8:99:0d:
                    fe:70:4b:e6:a1:e4:a7:0d:07:24:67:2f:77:90:3b:
                    6c:dd:8f:a6:20:0c:c1:e4:a0:67:79:ac:e5:59:79:
                    d8:f2:c3:31:96:5a:98:54:b0:0e:7a:60:32:5a:fd:
                    ac:68:05:68:e1:7e:64:2c:14:7b:eb:9f:7e:c9:83:
                    5e:d4:cd:34:2b:3d:9c:1c:bb:a0:ce:0f:bc:4f:8b:
                    5c:93:78:43:e0:cb:9a:81:0f:c0:7b:74:ef:ae:0d:
                    39:a5:b9:5c:35:12:f3:5f:cb:55:13:12:cb:d9:d1:
                    f9:68:cd:7d:69:c7:07:1d:2a:18:cf:99:d1:13:12:
                    0f:48:e0:08:27:16:60:93:d0:b4:79:f6:29:85:a7:
                    81:20:4e:9b:2e:e0:72:48:05:44:4d:7a:e1:4d:b1:
                    bf:05:ff:9d:8b:e1:f8:88:63:d9:bd:bc:1f:81:41:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E6:DC:94:B9:4E:45:31:75:C0:A1:D9:67:FA:70:74:81:41:30:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56dbc61f-4d3b-36be-afe5-62c45705115c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:c0:a9:af:ad:54:1f:ec:1b:6a:b2:b2:e2:2c:ad:33:8c:
         b9:fc:67:33:ac:0b:e8:82:fa:dd:84:e5:e7:f3:86:35:ff:13:
         d6:51:79:f9:f6:9c:0f:78:e9:3f:0c:a3:3d:f1:ce:a1:8a:da:
         05:82:0f:8f:f8:11:6d:d2:97:37:66:f0:64:b2:0c:e0:06:00:
         3a:7f:84:ba:fb:47:00:13:6d:3e:44:0c:7e:c6:d9:46:fc:54:
         f4:7d:b0:48:46:73:11:66:e4:40:e2:90:27:43:10:07:ee:e2:
         79:f9:bd:d3:83:79:58:67:8a:64:95:c2:2f:39:6d:15:12:e3:
         73:92:48:4a:5b:ca:7c:71:03:40:55:e8:01:55:1d:45:6a:22:
         55:c3:9d:71:c4:16:d3:97:b0:94:f2:e9:a3:0d:4b:4f:ad:77:
         b4:f5:2c:81:ac:ab:73:74:c2:15:66:97:98:44:21:34:00:d4:
         82:d6:25:02:36:4a:a5:e3:52:82:c0:51:8e:1a:1b:06:02:89:
         ef:dc:a9:2c:fc:58:b4:d2:e6:1b:b3:3c:85:e3:11:e5:79:b3:
         f7:06:e3:c9:1e:f2:f5:b0:a1:47:ad:21:65:92:ad:51:ef:c1:
         2d:5d:9b:bc:59:2d:35:c2:1a:6a:b8:ea:13:06:73:f5:10:7e:
         79:ae:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:59 2025 by rpki-client