Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19228c67-38ae-3c6a-afab-eed31cfe3690.roa
File:                     19228c67-38ae-3c6a-afab-eed31cfe3690.roa (raw, json)
Hash identifier:          Qo8CufK7QVS+Q3H1Rrp1dQu+mf78jZdc+NHtKAfsHMI=
Subject key identifier:   2A:03:5F:26:21:D5:67:67:90:DB:88:16:82:10:99:7F:FD:BC:A7:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79860D9F080C73F83E1F560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19228c67-38ae-3c6a-afab-eed31cfe3690.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397207
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:60:d9:f0:80:c7:3f:83:e1:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f108c223-01a0-4cd7-bd40-07851df3e6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:35:6c:b2:51:13:18:42:59:63:8b:de:a6:
                    30:97:8e:19:6b:86:c3:a7:fc:f8:e5:60:73:d8:2b:
                    05:46:0a:b4:9c:52:00:c1:e8:5e:94:36:ea:20:bb:
                    b6:15:95:e2:5c:0b:c4:71:60:71:8f:59:cf:bd:c8:
                    18:cd:9a:7e:4c:db:5a:5a:d0:4b:ad:8c:6c:64:4e:
                    f2:c1:ab:f6:46:61:4b:61:4a:31:0b:5e:23:55:be:
                    5d:dc:55:de:57:d4:d3:7e:9f:51:0e:8c:2f:92:29:
                    96:95:4a:80:dd:43:8e:5f:c9:c2:c0:b6:72:63:af:
                    8b:9b:a6:59:55:64:29:59:ee:75:6d:5d:6a:07:53:
                    80:89:ce:d7:07:3b:77:fe:19:96:aa:78:dd:55:7e:
                    5c:7e:d5:c6:6d:e8:5c:c3:07:c0:68:c8:68:fc:b0:
                    ec:74:5c:7b:b5:3b:13:dc:22:d5:62:9e:36:5c:21:
                    ca:21:c3:62:f2:cd:dd:d0:64:7a:8e:13:44:d4:3f:
                    bd:ba:94:ab:15:ee:71:55:9c:ed:f3:76:bb:be:85:
                    d1:d5:b3:d4:c8:d2:91:68:77:bc:80:b9:00:3e:5c:
                    63:bd:bf:de:b1:9f:40:f4:cb:ae:90:3e:66:00:6c:
                    8a:b8:54:16:07:94:a2:d3:88:2b:25:6d:a6:53:7a:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:5F:26:21:D5:67:67:90:DB:88:16:82:10:99:7F:FD:BC:A7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19228c67-38ae-3c6a-afab-eed31cfe3690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:24:b6:68:ac:02:96:a0:70:c0:a6:0a:49:8f:db:3a:86:
         2e:92:83:2b:fa:76:73:3f:b3:2c:26:b3:38:4b:c2:86:c7:2c:
         9d:fd:6c:c6:10:11:58:41:97:40:29:7a:71:47:b5:60:0e:c7:
         7e:f6:62:9e:80:b1:83:02:5c:7f:25:54:b9:81:d8:11:df:59:
         5c:7d:c4:3f:7e:87:f7:e9:05:25:70:88:82:83:c9:93:46:38:
         65:64:64:36:90:f6:96:83:94:ee:f2:64:d5:01:9c:29:52:47:
         76:6f:74:b7:d8:28:b0:f2:c5:02:fd:a8:1a:d4:f2:92:53:e5:
         cb:d3:af:fa:06:67:26:f0:8a:ce:8c:36:dd:75:18:d3:79:3a:
         df:24:bb:b1:ae:bd:f3:8e:7d:db:d2:9a:a9:e5:94:e2:ce:3d:
         ef:8e:05:c6:a4:60:7a:9b:74:ab:47:ba:9d:c5:87:6f:6c:99:
         69:b7:77:31:dc:e9:f7:f4:f8:a2:86:0c:8a:11:cf:63:99:c3:
         8f:7d:ad:9a:1f:cd:46:8c:e2:29:45:ce:38:6b:a4:a6:8a:12:
         4e:d0:ef:1a:d9:ba:0f:6e:8d:dc:62:78:13:78:47:78:f0:53:
         e2:1d:d1:e5:38:a0:2b:b6:c3:58:d8:10:75:9e:98:e1:f4:22:
         4f:01:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:28 2026 by rpki-client