Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa
File:                     ef25052a-2daf-3b3c-a45a-85a260641bdf.roa (raw, json)
Hash identifier:          RPrIgbSwRxhSQRzRK9vFpxkC6UsFvBbZmfJputSduZo=
Subject key identifier:   45:2C:6F:63:00:F4:7C:FA:EF:4A:35:F9:ED:04:BF:C3:98:60:28:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1DA30B05C09F2953D86C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396544
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:da:30:b0:5c:09:f2:95:3d:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=544fbcdd-5150-414a-a5fd-64de2ef23978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:27:2a:28:f3:25:c1:b8:9a:09:e9:27:f3:5f:
                    7b:62:89:6a:d1:2d:dc:d0:39:2d:47:5d:d8:aa:57:
                    cb:d5:70:34:76:b7:4a:9a:1c:d0:fd:1a:f3:94:05:
                    b8:66:99:0a:05:81:e5:ff:e4:b0:42:ae:89:1d:08:
                    74:41:43:2c:73:12:8d:b7:00:4d:58:7f:b3:2c:87:
                    39:14:a9:81:07:69:cb:1e:fc:6d:3c:10:0e:0f:3d:
                    a2:d1:c0:bc:e4:61:17:e3:22:25:c7:6e:2c:d7:ef:
                    36:b1:28:ab:e5:04:6f:fa:a2:96:03:2e:cc:1c:26:
                    04:ec:52:db:6b:ea:d3:02:3c:fa:0c:50:b1:31:8a:
                    ec:85:cd:c4:fd:b5:b9:88:2c:c1:0e:fa:f9:34:3d:
                    f2:64:2d:e5:5d:5d:86:a5:86:2a:a6:05:94:5e:c0:
                    65:41:17:19:d9:f9:a3:90:28:ee:3c:41:3a:da:50:
                    ac:01:e0:3a:ee:09:87:76:20:7f:e1:b4:70:e8:74:
                    21:57:02:7f:8a:92:4b:3d:20:5b:d7:f4:ee:4d:3d:
                    47:f7:e3:4d:1c:71:9a:31:12:d3:38:a8:af:06:58:
                    4b:d0:7c:38:18:8f:a2:6b:df:d1:62:8a:9d:47:b3:
                    dd:fb:02:87:62:be:87:90:36:a9:df:a5:2f:30:05:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2C:6F:63:00:F4:7C:FA:EF:4A:35:F9:ED:04:BF:C3:98:60:28:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:71:ee:05:61:b0:0c:d2:d3:c1:65:09:03:00:d2:3c:b8:f8:
         e2:7d:66:85:29:95:88:96:b8:25:e9:3b:49:ff:b6:d1:26:39:
         e6:78:f8:2a:aa:72:18:c9:53:b3:17:66:c0:77:c7:aa:4c:aa:
         43:c3:18:e6:6f:8c:fc:c6:03:6c:80:3b:7d:ec:51:e7:31:84:
         0c:b3:53:15:b7:ad:fa:15:c1:49:bd:3b:13:88:eb:b0:57:68:
         15:a4:23:f2:5d:84:6e:5a:eb:a8:a6:ff:df:c4:fb:cc:e2:74:
         3e:25:af:79:b1:4f:ed:8f:8c:d0:15:b4:a2:90:46:86:ba:8b:
         3f:a1:72:d2:ab:4b:10:69:21:a2:f3:19:0f:be:73:a2:eb:39:
         06:fb:2f:36:36:09:1d:24:a4:ee:07:26:a8:45:9f:a2:3b:af:
         ab:c9:ad:ac:11:01:10:aa:71:fd:ab:4f:60:0d:08:e6:82:46:
         cf:17:33:76:a2:ce:aa:ea:a7:b4:1c:70:dc:40:85:77:ff:be:
         2e:41:95:78:18:c2:3e:6d:d9:98:4f:44:aa:46:c0:df:fc:6b:
         ef:b6:a0:10:46:2e:e3:a7:6f:9b:96:9f:85:4a:4b:af:95:d0:
         5c:c4:80:88:52:99:e5:7e:a3:bb:57:34:80:a2:78:78:0f:d0:
         25:9b:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:22 2025 by rpki-client