Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755e4fff-b31a-3bee-87be-f7e8f9a88a82.roa
File:                     755e4fff-b31a-3bee-87be-f7e8f9a88a82.roa (raw, json)
Hash identifier:          pblu8YXti41qokCaqX7J36XyKiJ6HsDwkSVuDv0FZk4=
Subject key identifier:   5D:BA:30:59:F1:C0:41:F3:66:18:AE:4F:BE:B6:85:27:AF:81:47:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796EC2D92D9597CFAA544C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755e4fff-b31a-3bee-87be-f7e8f9a88a82.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36618
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:ec:2d:92:d9:59:7c:fa:a5:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a8830f2f-c57a-4d10-8ab1-529f4d155e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:79:67:ce:4b:c6:95:e7:49:79:91:7e:e5:53:
                    5b:bf:04:da:75:c9:7e:4a:7f:61:24:3d:02:91:63:
                    aa:eb:06:b6:10:dd:e4:84:4f:9e:1f:f6:18:cb:6e:
                    c2:60:62:02:e7:5f:aa:d3:5e:f1:eb:35:49:6a:71:
                    3d:14:71:dd:1f:13:82:03:4c:3c:28:9d:2d:c1:d3:
                    e0:95:0f:c6:bd:da:c3:36:b3:1b:2a:6f:69:04:3f:
                    eb:63:c0:41:78:87:93:5e:c0:f5:2d:c2:e1:b7:10:
                    5c:75:21:95:5a:d6:22:da:97:f0:b6:6a:37:27:e7:
                    a0:0d:d4:60:48:09:af:11:2d:40:ae:f8:d6:b4:cb:
                    11:cd:47:47:c8:00:40:1f:a5:c5:92:5d:ce:1c:c4:
                    3c:2e:ab:75:33:15:ee:12:c9:f2:a6:e3:08:35:4b:
                    95:7d:2b:b0:56:a7:55:23:87:b3:7f:15:f1:f4:46:
                    38:8c:95:45:d6:24:c2:3b:0b:45:26:f1:30:eb:5e:
                    b7:99:bf:b2:fe:d0:59:68:8f:dd:2d:0b:6e:14:0c:
                    07:3d:70:42:8a:08:5d:80:10:21:c7:7c:d5:f2:ad:
                    f4:2b:2c:5b:66:50:af:4f:3c:36:ab:43:0c:47:1b:
                    bc:39:36:78:d2:7c:74:51:49:d5:3c:ad:f8:a3:af:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BA:30:59:F1:C0:41:F3:66:18:AE:4F:BE:B6:85:27:AF:81:47:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755e4fff-b31a-3bee-87be-f7e8f9a88a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:5f:18:e7:41:42:35:76:6f:0f:91:35:75:6f:e1:77:aa:
         15:d2:68:b6:38:cc:ff:c8:ed:20:fe:94:4c:e3:4d:76:63:72:
         72:cf:32:d0:da:7d:7f:b5:1e:57:43:c3:52:49:df:f2:5d:7e:
         f1:c4:fc:fb:f6:85:e7:b1:0f:fc:af:5c:5a:4a:5f:7c:61:da:
         c9:6d:bd:4c:f7:98:62:79:b5:b1:0c:04:54:3a:37:81:b0:8f:
         89:81:b1:15:f6:08:7b:f9:98:69:a8:09:15:c4:2d:cf:76:9d:
         bb:3a:f1:a6:11:c1:d8:01:26:98:a9:9d:43:f0:15:30:67:16:
         02:1e:d4:78:52:86:ab:b6:c4:41:cc:1b:85:f1:9a:59:9f:5f:
         94:04:a9:99:d6:44:62:75:5b:4c:cb:0b:24:f6:40:8e:d4:ad:
         9c:f2:fb:ec:f7:9a:37:df:32:68:13:9d:fb:4f:eb:f0:ce:a6:
         3e:57:83:fa:53:11:54:be:30:52:11:ee:6d:a9:35:86:7f:96:
         6e:7d:6c:3b:6d:7b:e2:a7:42:0f:a4:35:e2:63:85:26:5b:c8:
         af:38:93:57:25:1e:90:01:82:fb:15:ca:7d:b5:06:5e:c9:ce:
         a4:2b:5f:f1:94:d8:93:24:9d:3c:52:f0:ee:f4:d8:7c:50:f1:
         16:a4:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:54 2026 by rpki-client