Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa
File:                     33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa (raw, json)
Hash identifier:          aXky/qClA1ApTecp/vtMPO0xVTzNgbSjxK8Opu15kZ8=
Subject key identifier:   0D:BA:55:18:B5:67:AC:DA:E5:B8:9C:16:F4:0B:3F:0A:53:89:FA:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA798589B8AA8EA3464059EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396594
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:58:9b:8a:a8:ea:34:64:05:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56ebf4f6-6406-4313-a401-b5d3890a7542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:18:56:0f:b3:ec:45:8f:ff:41:73:58:15:
                    5d:35:39:a1:19:cf:17:85:bb:aa:b4:31:31:56:87:
                    1c:ca:18:b1:94:e5:77:cf:4e:47:50:c5:e8:d7:a9:
                    89:8a:d0:2d:89:d8:d0:a5:8a:54:e7:05:16:33:fb:
                    06:86:ba:17:1f:01:22:7e:e5:37:36:7a:50:0e:2d:
                    da:12:4e:8c:ab:3d:58:2e:90:b8:fc:e9:e0:bc:2c:
                    2c:f0:02:1b:ab:1a:ce:7a:fd:d6:ee:e5:8b:48:fe:
                    56:98:fa:c8:19:bb:f4:09:4c:1b:63:ce:e4:de:99:
                    e4:5c:65:88:38:15:c0:7f:f1:90:2d:2b:c2:1d:ef:
                    cf:c4:55:6a:d1:7d:d4:b2:9f:6e:21:93:b1:e4:fe:
                    65:32:7d:da:fa:ea:9a:ae:3e:9b:0a:ef:4f:7e:34:
                    9e:27:0e:00:3c:3a:e9:90:57:0d:45:58:0b:a4:09:
                    72:ed:b6:78:a9:0e:d8:f2:8c:00:66:c1:6e:c9:96:
                    8e:1c:fc:b1:f2:01:0d:a6:91:fc:ae:a2:43:3a:4f:
                    ce:cb:44:23:21:24:dc:53:93:ee:82:8a:74:22:55:
                    0d:55:8f:e2:35:49:30:fa:99:d9:8e:65:73:b3:64:
                    ff:4e:6c:4b:39:c6:f2:18:a3:03:e8:8c:2a:3a:dc:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:55:18:B5:67:AC:DA:E5:B8:9C:16:F4:0B:3F:0A:53:89:FA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:81:c3:6b:4a:53:23:b7:de:06:04:00:04:99:1b:d8:0b:37:
         6d:d1:7e:1f:d4:ab:72:c6:d2:49:97:5c:2b:03:75:25:71:70:
         35:4d:bb:82:b3:f0:1a:6b:e4:5c:1b:42:28:1b:a1:32:d1:0b:
         b4:93:d2:e2:f6:78:29:dc:0e:a6:c0:45:a5:f2:27:e8:27:b3:
         81:94:95:1c:a3:8b:2f:ed:8b:85:2c:00:38:b2:98:43:62:ba:
         d3:a8:e0:91:c4:78:ea:fc:f1:5a:ac:61:7f:4b:75:2b:f7:09:
         f7:a7:dd:f7:17:73:79:dd:2a:12:fe:ea:fc:12:9c:2a:84:ea:
         45:2c:29:e5:f1:8e:b2:38:e6:6b:23:b8:d1:d0:51:de:ea:f5:
         dc:8d:ad:bf:83:b0:87:97:6d:d6:6b:b4:76:d8:3c:03:8f:ae:
         79:63:b6:7a:4a:d5:cb:cf:52:9c:fc:74:2e:f8:32:55:ef:98:
         3b:80:3c:51:a4:0a:d9:03:85:91:6f:15:df:e5:71:20:49:7d:
         1c:51:62:33:18:3c:4a:e2:90:1d:f0:ba:ae:2d:90:13:7b:c4:
         d6:07:64:da:89:f4:64:bc:c6:3f:c6:a0:30:82:e6:81:0a:b7:
         99:e2:d6:35:98:77:cb:55:7d:78:08:b5:66:94:81:f4:6b:a2:
         50:cd:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:28 2026 by rpki-client