Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa
File:                     18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa (raw, json)
Hash identifier:          7GpplBHhuINLI9AqWxKQOIKoMlCc0r9XQV0D1DIFgps=
Subject key identifier:   93:87:51:46:EC:F8:34:BF:43:0C:1A:A9:D4:88:9C:67:86:D4:1D:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC1FAF9D1F72A64044C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396564
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c1:fa:f9:d1:f7:2a:64:04:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d487be26-1f30-409a-8fae-ba4feda0bf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:dd:d5:50:f5:97:01:68:6e:56:d2:52:b9:
                    f8:57:af:60:4b:7f:a6:de:c4:99:d9:5e:3a:bd:31:
                    9d:bd:c0:32:83:59:df:ff:3f:dc:4b:2f:ea:16:49:
                    15:86:93:b9:69:3f:09:b5:9d:84:1c:91:46:66:e9:
                    3f:cb:42:5f:54:a0:1f:1e:f5:46:bb:9d:c0:6a:02:
                    60:23:98:98:b7:97:9c:1c:4f:81:ad:da:38:1f:b3:
                    56:ca:7a:11:54:ea:8c:c6:68:d6:1e:dd:2b:4e:04:
                    fb:76:47:63:3e:44:15:06:0b:f9:2e:9a:88:de:eb:
                    a0:cb:f7:64:30:25:a4:8a:b0:b0:f1:dd:d0:3a:19:
                    55:5a:04:e5:a2:28:a7:03:5a:b1:bc:a1:bb:8f:f5:
                    7f:54:f7:73:cc:52:61:05:5c:39:8c:fd:c9:78:98:
                    3f:72:fd:95:8e:3f:7c:f8:c3:bf:98:a6:a6:00:9b:
                    2e:e6:fa:dc:f9:6c:a1:4f:54:49:96:bc:97:3c:4f:
                    8a:9d:1f:9a:dc:5a:d5:bf:18:44:4b:16:23:d6:67:
                    23:67:a5:93:1b:a3:59:6f:a1:cd:d5:24:9c:67:a0:
                    66:73:b7:39:89:8d:75:f7:7a:8f:92:a3:87:e1:8b:
                    de:00:af:3c:8e:f7:52:35:8c:f8:c4:9d:fd:e2:1c:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:87:51:46:EC:F8:34:BF:43:0C:1A:A9:D4:88:9C:67:86:D4:1D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:55:7c:25:9a:d4:38:ec:60:55:17:1e:7c:31:ff:b1:d5:9b:
         b9:e7:04:3a:e3:f1:27:78:db:1d:ac:71:9d:44:42:58:01:11:
         1b:8b:1f:1e:bf:01:c6:49:bc:ee:36:c4:9a:11:54:f8:9c:16:
         8e:c3:48:58:db:71:f1:76:c5:1a:14:20:d5:08:af:a8:e0:75:
         b4:5e:88:15:49:2d:ac:fc:ee:88:74:c7:24:3a:04:2f:f3:5a:
         6f:f5:07:5d:fe:48:62:2a:28:b7:97:c0:f0:dd:d8:d4:f5:6c:
         5c:cf:24:a1:b3:81:01:3f:98:87:7d:6b:db:cc:4b:12:81:fc:
         81:31:e9:cc:c7:26:99:28:e6:76:fe:0d:97:00:f9:e3:80:7a:
         ee:c4:b6:48:c8:c0:ec:81:f7:7d:72:7c:0d:bc:7f:96:3e:67:
         8d:87:10:67:23:2b:35:a6:98:fd:4a:41:2e:00:a3:55:50:18:
         f8:7d:d5:01:26:37:da:c0:50:c3:73:76:b8:4c:b7:b3:88:6a:
         43:a8:c6:5d:ee:f4:16:af:af:6c:0a:99:a7:3d:a7:ae:67:03:
         5e:45:87:65:b4:e2:50:1c:ef:e2:7e:7f:34:55:f2:73:99:ca:
         f3:cf:7b:c7:ac:b1:28:90:ae:bb:24:0d:9c:6d:63:ec:4b:1b:
         6b:0d:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:14 2026 by rpki-client