Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa
File:                     acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa (raw, json)
Hash identifier:          +1TWHd6xI9pBZnaTOyAoumEqzK4r7qMDaFHnOAjynUE=
Subject key identifier:   30:1B:2B:D2:F8:28:82:67:7E:65:5B:74:3B:32:A7:71:94:C3:D8:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC9A89A9A0DF977D59840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397199
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c9:a8:9a:9a:0d:f9:77:d5:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2db87a14-dc98-4727-bdd3-0dd519f9c370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:08:18:08:73:4a:65:a6:ef:d0:6b:7e:19:
                    a9:7c:6d:9f:6d:a4:9d:f8:db:5c:b0:d1:02:de:97:
                    2a:4f:3c:ff:78:d1:36:e3:98:cd:1a:3b:9c:45:30:
                    36:81:c0:fe:47:d7:97:e9:b6:32:7a:c8:ab:0a:e8:
                    21:f6:7c:ce:27:74:80:ec:55:de:ab:48:72:27:cc:
                    aa:e4:d8:84:d5:86:32:7e:e7:60:1d:9d:64:38:eb:
                    54:67:a8:4b:d5:e6:05:62:e9:d4:44:9a:83:ed:7a:
                    14:32:75:1c:bb:4e:46:b3:1d:f9:87:25:61:86:77:
                    56:cd:d3:c9:36:3d:59:d1:a7:ef:c7:bf:a0:84:01:
                    cd:5d:3f:18:74:5b:71:05:86:00:f6:ad:39:14:9b:
                    3f:84:22:2c:30:67:ed:23:f0:fe:82:a0:bb:25:b1:
                    14:07:58:44:f7:1a:e4:a2:c9:65:85:0f:8d:73:5c:
                    76:80:be:37:a8:2f:f5:e0:3e:db:f0:3f:7c:98:8c:
                    e7:70:2b:c8:b3:30:b1:4b:9e:f2:92:91:b9:85:66:
                    8f:db:99:b8:46:f6:63:4c:8d:5a:31:9d:14:6d:2b:
                    87:b8:17:ce:28:fb:91:d6:f5:71:53:8a:b8:28:d4:
                    94:f3:09:72:82:0f:b7:96:d3:ec:4b:02:0d:c7:ac:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:2B:D2:F8:28:82:67:7E:65:5B:74:3B:32:A7:71:94:C3:D8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:11:d4:33:f6:5e:a3:cc:b4:b8:72:11:fc:47:02:52:0a:c5:
         fd:5a:ed:03:c6:d2:2e:0d:bb:9c:7f:71:4e:bd:0b:56:b7:6f:
         14:6d:45:8f:f3:75:6d:ec:46:10:9e:b0:56:59:7e:ad:d2:d2:
         29:01:f2:63:45:b6:9c:36:91:34:9d:b0:5d:66:f8:af:0b:be:
         75:2f:f9:fd:38:63:7c:32:ef:ab:53:bb:81:07:93:10:64:53:
         e6:50:63:75:a4:5f:80:f5:43:85:dc:d0:89:20:dc:0e:c7:eb:
         62:21:9f:04:44:7f:7c:6f:68:f3:6c:8e:86:67:8a:7a:ec:f8:
         09:ec:fc:b3:a1:0e:51:22:80:81:f2:79:84:11:74:3a:3e:72:
         30:06:e1:47:56:39:3f:c5:74:ee:a9:b6:07:07:1f:93:1b:fc:
         0c:81:58:13:a1:9f:5d:7d:b5:f1:e3:87:ec:f5:69:5a:21:46:
         4c:6e:37:c0:6e:31:78:6c:89:39:85:e6:02:f9:73:cf:66:e7:
         6a:03:96:bd:8d:06:03:cc:64:90:43:13:59:ab:c8:94:08:5e:
         69:52:2e:b4:e7:33:ae:66:b4:5c:68:9f:9e:4b:58:ec:b0:2d:
         cc:25:f2:07:00:89:c7:e3:c6:4a:5d:fd:e4:81:74:e7:81:9c:
         ef:e7:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:46:05 2026 by rpki-client