Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785b3457-eeb1-3897-929d-860c932051cf.roa
File:                     785b3457-eeb1-3897-929d-860c932051cf.roa (raw, json)
Hash identifier:          b6fJ3JKl9Hmhccjwe6xR0hXbKR8nOko/LTd5F9axyrA=
Subject key identifier:   DD:A6:4F:2D:55:81:61:61:C6:59:71:AD:5C:27:59:92:17:3C:6B:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1DC73A576EECEC50E9B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785b3457-eeb1-3897-929d-860c932051cf.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396612
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:dc:73:a5:76:ee:ce:c5:0e:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=4fee476e-f525-4f33-91a7-0a969515456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:44:f2:4c:7b:b5:d4:79:1a:eb:a7:e0:1f:
                    25:a5:d0:84:c9:53:10:26:b3:b3:0e:2e:d0:24:c1:
                    15:82:56:d0:c6:79:5a:77:24:d4:d1:6a:33:0f:3b:
                    0d:d2:3e:4f:c7:7e:e3:32:1c:00:57:d5:80:22:0b:
                    90:25:d3:9f:a5:73:16:df:1b:2b:93:0c:cf:6a:35:
                    7b:e6:07:86:65:6a:29:fb:71:fa:78:56:ac:1f:16:
                    82:cd:d6:19:0b:f4:28:f8:a7:9a:15:12:ed:66:ef:
                    a1:b8:78:4e:34:1c:d9:41:b3:0c:da:b9:a0:99:6c:
                    69:b7:12:51:a0:be:48:7d:1e:46:f5:b1:b8:45:50:
                    c7:b4:89:90:e1:6e:23:47:bc:f1:55:0a:e3:0f:06:
                    7e:b4:a5:5f:1d:9a:47:79:05:53:5d:11:27:38:d9:
                    1b:0f:04:c3:3f:12:4d:d5:2d:c1:9a:fd:60:ed:4c:
                    7f:c8:b9:a4:81:34:38:f8:d9:60:50:07:88:d2:ad:
                    a0:8c:00:2e:67:f6:b6:7b:cf:73:a4:d3:a5:cd:18:
                    ba:6d:9e:55:7c:ab:42:db:2b:d4:bd:4a:f0:e3:a4:
                    fa:eb:b7:89:f1:7e:a7:ff:60:20:a4:2d:6c:70:5c:
                    7c:fb:a5:3b:07:61:ec:ec:fb:fd:73:3d:ac:7c:12:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:4F:2D:55:81:61:61:C6:59:71:AD:5C:27:59:92:17:3C:6B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785b3457-eeb1-3897-929d-860c932051cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:45:72:cc:de:c9:d2:dd:aa:37:c5:49:b6:7f:4e:cc:ce:
         85:0f:98:2a:e4:e4:49:8f:21:da:8b:d5:01:dc:e6:b2:4c:50:
         63:1d:62:20:5e:63:43:22:15:3f:4b:47:4b:48:c0:f7:9c:f0:
         53:19:96:70:b0:93:a0:2a:fc:52:ef:dd:1b:56:02:6e:36:bf:
         40:ea:cf:86:5c:67:4b:51:fc:cc:05:2c:7c:a1:36:6a:6f:83:
         cd:d4:e8:7e:94:5c:16:76:0d:16:10:1a:26:27:90:8e:cd:8d:
         13:a7:c7:2d:db:d3:d5:ab:7a:1b:99:95:94:c3:fd:3f:9f:b1:
         6c:ef:e3:11:62:c2:24:7c:c9:ae:6c:5d:c6:b9:af:94:3b:34:
         69:95:04:96:f6:d9:2b:cf:ac:42:71:80:00:a6:43:23:b6:7e:
         de:05:ea:dc:30:78:1d:d0:e3:15:8d:82:c2:07:8e:a7:a1:62:
         5d:8e:2e:79:69:3a:db:21:c2:db:26:97:34:e7:b9:5f:a6:23:
         e8:97:3e:4a:a7:87:64:33:36:e2:1d:69:fb:68:2e:82:67:61:
         6a:29:b8:7b:b3:26:2b:c2:6f:df:02:46:5b:99:ed:8f:7b:81:
         44:59:4e:51:f3:56:94:9d:17:18:af:19:e7:e1:66:e6:83:3c:
         be:b0:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:11:11 2025 by rpki-client