Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
File:                     65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa (raw, json)
Hash identifier:          2WWlwu11S5o18t0SFdQ0tCltQtixMy0VLkpBW4yRBl8=
Subject key identifier:   5C:00:A6:6C:D0:DE:F0:69:7E:DD:83:63:FB:AF:E4:DD:3A:DB:41:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79ABC867B8E624D473F3AF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36621
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:bc:86:7b:8e:62:4d:47:3f:3a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=401e8ffd-fb77-4b17-ba0e-49ba0cc5ede5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:7f:c3:90:05:80:88:9e:e9:97:07:39:77:
                    77:da:ed:21:87:a2:7c:e5:d1:83:a8:15:a5:95:11:
                    1f:33:54:52:bd:df:12:27:6f:89:67:27:01:9e:2f:
                    fc:a8:cd:b7:e5:90:18:4b:f3:d3:6c:fa:cf:55:e5:
                    69:e8:39:af:d9:e9:b9:65:5c:8d:7f:39:ad:f3:31:
                    0e:fb:30:49:ab:81:b7:20:c7:73:6c:e6:a5:2d:a1:
                    63:97:ed:31:83:97:f4:64:2b:80:c2:9b:82:27:4a:
                    c4:58:9f:74:01:ca:f6:a8:a2:a5:d7:78:7d:f6:05:
                    1c:53:3e:ca:ea:b0:9a:7e:64:4d:8e:47:fb:ad:68:
                    cc:18:7b:10:65:a2:75:fd:df:af:1f:dc:1c:05:43:
                    16:bc:78:62:8b:42:5f:89:2c:63:3e:44:71:7d:db:
                    b5:e5:a1:f1:39:40:47:07:ec:1f:ba:89:ad:4c:7d:
                    a4:4c:a0:65:ca:7f:c1:e5:d1:64:da:bf:8e:5e:74:
                    08:0c:1d:5a:3b:21:a5:2f:b0:b1:67:f0:db:6a:26:
                    17:f8:2b:ee:fb:85:64:9d:97:53:44:60:af:ab:5f:
                    83:8d:c5:8e:38:28:f1:69:58:37:1b:79:d5:08:25:
                    24:ee:80:80:46:0d:38:bd:89:30:e6:11:0b:4d:40:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:A6:6C:D0:DE:F0:69:7E:DD:83:63:FB:AF:E4:DD:3A:DB:41:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0d:19:3a:e6:e5:e1:67:bf:43:8b:68:f2:99:94:03:7a:7e:
         1e:37:c8:bf:b2:82:a6:e8:98:2c:78:a2:dc:af:5f:00:79:8a:
         18:7d:1b:21:77:57:d3:8c:84:cf:ba:4e:06:75:45:5e:e3:ff:
         c7:eb:00:ad:df:0b:6e:21:00:ba:ea:85:e9:f6:ba:f6:c2:62:
         a2:85:99:c6:fd:96:23:66:77:34:7a:3f:05:33:2f:7e:f8:a8:
         c2:a2:1a:41:73:1e:7f:80:e1:d2:12:4c:cc:40:15:60:52:19:
         ad:2c:60:c4:c6:62:be:21:fb:85:97:76:cc:2c:fa:b7:9b:be:
         66:62:0d:af:32:6c:49:0f:3d:b3:92:ab:a6:92:69:c6:b7:23:
         d1:4d:52:27:d7:0f:1f:d2:65:61:e0:55:40:d8:40:90:ba:4c:
         e3:02:a7:5c:ec:22:55:c4:9e:12:66:71:1d:eb:38:e7:8d:3a:
         f3:7e:8c:6f:57:25:b2:02:ca:c2:a0:86:45:d1:d3:10:9c:67:
         88:cb:f2:2e:19:14:d2:d0:be:fc:33:19:00:4b:bb:ac:c1:63:
         04:ee:99:fc:06:75:a2:7b:88:03:f6:d5:b8:64:bd:35:c5:e2:
         66:f8:53:53:5a:2e:e9:62:00:21:c2:3e:26:9c:6f:84:80:17:
         9a:9a:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:35:36 2026 by rpki-client