Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa
File:                     c7badab9-b8da-3728-9606-56571b7ffcee.roa (raw, json)
Hash identifier:          uPU7dESQ2XniXY95AA1wnyP7bHbQ83YTopiHh6OiTp4=
Subject key identifier:   46:F5:4C:C1:E7:D1:82:C1:D3:93:D6:F6:F6:E2:04:BC:68:04:88:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC7110CCD0CAEEDCD73C10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396584
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:71:10:cc:d0:ca:ee:dc:d7:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=2b2b1911-d091-4134-a0bf-3aa4205b2dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:4f:0e:0a:84:b8:35:b4:f0:66:1e:a8:cb:
                    0a:d1:a9:dc:90:7a:a4:3f:f9:b0:eb:4f:a0:73:b1:
                    b5:16:71:ed:85:ee:c7:8d:b9:74:8c:7b:38:b1:1f:
                    c3:39:cc:82:38:3c:2e:2c:17:06:d4:09:66:42:34:
                    7c:b8:5b:6d:93:39:bf:5b:14:1b:9b:70:39:0d:66:
                    cc:20:87:e5:52:bb:52:9b:9c:d9:12:84:c2:45:c1:
                    d4:2e:35:0a:37:5f:73:a4:98:13:41:c3:3e:fe:d8:
                    e3:aa:4f:bb:07:11:b1:d1:6d:95:52:94:dc:df:a6:
                    e9:71:b0:9d:99:b7:6e:7d:81:4f:e5:d6:c2:3e:d0:
                    7b:37:b0:1c:94:55:5b:59:3d:c8:2d:6c:a2:44:88:
                    c9:51:dc:da:3d:84:c7:76:23:a3:af:f6:3f:21:9d:
                    e1:dd:7f:21:a2:90:5d:65:de:8b:70:56:6a:f0:a6:
                    7f:47:9d:a2:50:ce:02:33:3e:db:c8:f2:b7:44:2f:
                    4c:f5:08:33:f7:c0:a2:a7:62:e2:2d:4d:ae:5f:71:
                    38:33:1b:f6:0f:69:4d:61:94:73:ae:ad:f9:11:a7:
                    47:ba:2c:b6:3b:f9:c6:52:9e:fa:56:5f:c2:82:85:
                    27:5d:7e:72:57:82:e2:a6:a7:97:05:76:3a:f0:6e:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:4C:C1:E7:D1:82:C1:D3:93:D6:F6:F6:E2:04:BC:68:04:88:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:39:a2:f5:90:1b:61:03:93:d2:e6:73:59:0e:17:a9:24:
         8a:e6:d9:aa:39:fe:2c:e4:95:89:84:a7:5d:22:f5:71:63:a7:
         3c:a7:2b:a5:06:dd:4e:5d:1c:7d:46:ad:ab:65:08:3f:54:50:
         62:7f:84:6b:76:7c:a0:e4:e0:3f:9d:2b:76:a0:bc:4a:63:69:
         31:66:f4:a6:c9:91:05:90:cb:8e:34:51:71:cc:17:c1:39:1d:
         46:d8:22:fa:d3:07:8f:49:4b:9f:76:60:49:a6:16:07:d0:ec:
         a0:b9:93:32:26:72:2f:ba:54:f6:e8:b2:83:64:26:7f:37:f1:
         02:c9:88:89:91:a8:3f:b1:87:46:99:ae:0a:50:53:71:9c:37:
         a3:b1:c0:fa:f8:82:37:9e:10:74:0f:9d:a9:eb:eb:52:cd:24:
         75:cd:d4:d9:b1:29:5b:70:bf:e8:64:c9:b5:72:bd:98:dd:53:
         a0:6a:e4:4b:e6:c1:b0:a4:ce:5a:5d:05:64:90:fe:8a:b6:21:
         72:dd:c2:1a:cb:ea:5a:15:5f:7f:a8:b9:ec:c2:29:97:5e:c7:
         96:8c:7f:56:79:ee:db:0b:58:93:ce:c0:68:43:e3:da:95:91:
         a4:c6:8c:99:f6:28:b7:d4:4e:cf:29:aa:f5:64:a5:22:c2:db:
         36:5e:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:08 2025 by rpki-client