Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6bf75f-5db0-3b56-a68c-5c5f373a909a.roa
File:                     cd6bf75f-5db0-3b56-a68c-5c5f373a909a.roa (raw, json)
Hash identifier:          +mjwwIo/+wC08I1DGYoWbtTxH1Err1FrDTNzQ2nQYMA=
Subject key identifier:   B9:2A:DD:2D:30:38:58:6C:83:75:16:57:D3:77:A0:6B:D8:8A:96:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6F249B9FA0D000641380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6bf75f-5db0-3b56-a68c-5c5f373a909a.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396596
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6f:24:9b:9f:a0:d0:00:64:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=bb70e6ac-e586-4375-abf5-c8d3729eb0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:18:39:cd:d6:9c:75:ff:af:6b:44:71:a9:
                    7a:22:f6:12:94:2e:9a:4d:1f:79:a1:0d:66:6c:9e:
                    53:69:c0:6a:b1:87:a1:03:59:a0:5d:31:12:eb:65:
                    19:5a:a3:1c:fc:e3:e9:88:c4:b5:06:58:0b:48:79:
                    34:9e:77:d5:08:2f:9e:64:7a:37:5e:6b:cf:79:0d:
                    37:48:c1:b9:33:09:62:b0:e3:8f:77:65:04:48:43:
                    21:5a:62:eb:0e:67:34:84:7a:77:31:2d:9f:ea:b4:
                    e8:2b:81:50:4e:4b:f8:de:32:3c:d0:74:26:99:f4:
                    16:da:18:3b:04:cf:f0:64:99:30:78:b2:b0:a4:7b:
                    6d:86:bf:1e:82:70:9e:d4:9b:b8:f8:1e:6f:71:e1:
                    a5:db:a3:0f:12:d5:31:fb:6e:84:25:a8:6b:fe:f0:
                    d6:5c:73:fb:e1:4a:96:c7:e6:d7:df:3b:23:72:04:
                    5c:48:43:41:71:7d:15:da:40:55:30:2a:11:de:3f:
                    c5:6c:2d:28:92:57:9b:7a:45:57:8f:42:fe:13:51:
                    96:93:3f:cf:c9:95:ca:da:d2:eb:03:e7:5a:56:d6:
                    fd:23:f1:a5:1b:7b:bc:71:54:56:a1:8b:22:c4:76:
                    95:ae:d3:3d:bf:04:98:64:20:80:cd:4a:c4:98:1c:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:DD:2D:30:38:58:6C:83:75:16:57:D3:77:A0:6B:D8:8A:96:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6bf75f-5db0-3b56-a68c-5c5f373a909a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:c8:64:96:4b:87:ed:f6:6b:47:84:bc:c8:b0:47:c6:43:
         2b:b7:be:5c:b9:94:fc:0b:b3:3d:9c:36:a8:8e:ca:a5:cf:bb:
         d8:a4:c7:a6:83:d5:bd:50:70:d2:be:30:4d:33:72:96:a3:22:
         ea:33:60:e8:db:cb:c5:c4:a0:36:5a:cf:83:ff:3d:6f:24:33:
         81:f9:e4:bd:1d:5b:ea:9e:32:aa:1c:d1:0b:aa:8e:79:f8:df:
         0c:61:cc:7b:60:d6:ec:10:9c:86:d8:5a:25:14:c0:99:5f:b2:
         29:27:27:a0:53:88:43:39:03:ca:9a:50:a4:69:5f:83:29:53:
         ee:08:53:a8:c7:58:d0:49:7b:cf:89:39:d5:65:37:2f:91:91:
         29:66:14:5f:8d:49:b7:8e:4a:9d:19:8c:b2:1e:08:f8:f4:0d:
         d8:d8:38:d0:5f:f4:2d:0e:38:6d:20:c5:e4:f6:9b:35:8a:cf:
         33:f9:31:1c:a2:0b:a6:4e:48:a8:4e:69:a6:a7:8f:97:66:ae:
         72:17:75:e9:7c:12:65:0e:ad:0c:3e:e3:6f:20:de:9a:4a:b3:
         7a:db:29:eb:c1:bc:57:8a:5c:5a:06:59:35:85:37:71:57:27:
         a8:40:12:59:a2:fc:e7:72:f1:dc:0e:37:d7:71:ab:50:af:fe:
         52:4c:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:42 2025 by rpki-client