Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa
File:                     9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa (raw, json)
Hash identifier:          EuHtzVfTUsLNh4srU+o/21Qs116iu9AB9piVQbsyaao=
Subject key identifier:   B4:F3:14:25:71:41:E7:6B:FC:86:E7:CB:0B:F1:5F:3E:22:34:F5:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1DD31F388FA77CA98EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396584
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:dd:31:f3:88:fa:77:ca:98:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=40bbc3f5-71cb-4115-a1b9-c50d5824557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:67:62:ab:4c:fe:18:d4:85:7b:fe:53:c2:
                    15:b0:ff:ce:73:56:de:9c:92:29:7e:e4:f4:9c:d2:
                    7f:8f:c6:e9:73:a9:33:02:8b:74:94:41:73:5f:78:
                    cb:5c:81:7c:9c:7f:f3:54:79:2d:d6:c7:ee:a5:01:
                    99:b8:99:c4:bb:9a:e4:06:ad:97:50:34:17:04:6e:
                    92:bc:72:05:f8:e6:92:f7:81:39:67:6b:2c:8c:2f:
                    06:c0:3a:9e:15:da:a3:9b:7e:6d:10:4e:8b:db:78:
                    fd:a6:76:54:35:0f:33:93:c1:99:c4:33:e1:c9:c8:
                    e2:1f:44:11:e4:13:cc:53:2c:f4:61:90:03:63:3b:
                    a5:6c:e2:72:e4:24:4c:11:75:61:08:c1:f4:b4:e0:
                    e9:78:09:d7:36:d6:91:d0:aa:17:6b:37:90:69:05:
                    69:92:e6:c7:4a:54:14:84:4b:7b:51:54:b3:b4:96:
                    0e:41:13:00:7f:6b:13:7b:05:0e:67:36:a7:06:85:
                    c5:70:9e:7a:dc:2c:5d:8f:6c:82:53:70:37:91:f2:
                    99:b4:a7:15:a8:b8:db:20:e2:26:bf:b8:83:46:ee:
                    6c:be:89:0f:a2:f1:e7:d0:71:b5:c2:85:a0:23:08:
                    cf:33:6e:d2:50:21:76:d9:95:11:b5:4f:b9:2b:70:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:14:25:71:41:E7:6B:FC:86:E7:CB:0B:F1:5F:3E:22:34:F5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:25:03:3d:9e:09:3e:df:3f:f1:53:08:6d:dd:6f:d8:96:
         a9:fc:62:58:bc:00:06:98:3b:b6:36:05:d1:c5:2b:9b:11:4c:
         3c:c9:6b:6f:58:2a:25:ee:8a:0c:9d:d7:5d:6d:d5:0a:34:16:
         f1:6e:7e:a4:ff:36:47:8e:82:22:e6:ee:20:f7:05:df:83:73:
         6a:cd:12:52:3c:70:f4:e7:35:cb:d6:71:fb:76:3c:fd:79:e6:
         43:0f:64:54:e9:b1:6e:50:2f:25:35:c4:90:b1:4e:79:d1:a2:
         4a:aa:98:a3:6f:5b:bc:c4:64:04:89:3b:7a:58:06:d0:34:4a:
         6e:46:32:57:d8:9d:ae:83:b0:b4:1d:f3:3c:90:a9:0a:1e:32:
         d1:9c:05:f9:5b:86:63:95:ec:c7:14:a0:9f:2d:f3:a6:bd:6d:
         ec:0d:f4:2c:a4:f4:37:75:59:e8:f7:2a:95:4b:03:e2:50:30:
         7d:cc:13:40:1e:c2:56:2a:ab:8d:7e:ee:48:3d:20:41:a2:16:
         ed:b2:31:fc:03:0a:fe:fe:27:9b:c8:76:28:a2:53:d4:6f:5a:
         18:71:42:ca:45:e0:33:d1:6d:1a:c5:a8:86:a7:df:f5:06:36:
         c0:4f:c1:ba:1e:c6:73:20:97:88:98:16:06:f5:b4:d1:66:a9:
         18:f8:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:42 2025 by rpki-client