Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa
File:                     b697bb53-34fe-3d47-b004-1559bc048449.roa (raw, json)
Hash identifier:          7oF1kDPXzuV04SyzXBiFuwOWVdtGsWVJrV49kdBiyiQ=
Subject key identifier:   30:5A:33:A3:3E:E2:FB:9B:A6:30:8A:B2:A3:CA:FB:A7:62:52:71:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79CD2242EF1D53F789E42C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:d2:24:2e:f1:d5:3f:78:9e:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0874c66e-d407-4a7a-9d6a-95391fecb491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:ce:1b:df:dc:4a:8d:9c:0e:0a:cc:b9:f7:
                    3f:bb:70:8e:60:ae:64:74:1d:90:cc:26:85:b3:a9:
                    92:7a:c7:53:39:fa:e6:0e:f7:be:0d:9d:8b:e3:5f:
                    03:31:98:7b:d9:9f:c8:c7:b5:e8:d4:cd:cc:ed:17:
                    bc:44:78:86:f8:4c:73:1e:cb:c5:12:a2:51:99:b9:
                    b3:b4:b5:f7:5f:e9:67:a1:48:b8:7e:ac:ce:3d:aa:
                    35:d2:c7:58:94:57:c6:b6:b8:cd:4a:88:da:7a:02:
                    01:51:ad:c7:3e:c5:ad:08:72:62:3c:b3:8f:fe:79:
                    a7:4c:11:6e:cf:ad:58:4f:74:89:52:0c:ea:48:c3:
                    4c:d7:b1:ff:8a:8a:22:5f:9c:9d:0f:64:ba:61:b9:
                    26:e0:c6:da:f8:ed:9c:cf:67:53:07:a4:35:64:be:
                    82:8e:8c:42:d5:90:cb:06:90:b2:42:23:b3:4e:e6:
                    c1:60:f1:63:7d:2e:ff:bc:70:d8:14:5f:72:0c:f2:
                    23:66:00:b0:eb:7a:de:b1:24:fe:1d:76:c0:2b:0e:
                    93:db:93:67:f0:75:8c:35:cc:c1:25:0e:88:5e:14:
                    be:0f:81:37:33:dd:49:3a:00:9b:37:53:b9:83:b2:
                    fc:3f:60:f1:9b:b5:bd:b4:ed:df:24:c8:fd:a9:fd:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:33:A3:3E:E2:FB:9B:A6:30:8A:B2:A3:CA:FB:A7:62:52:71:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:0d:40:0d:e6:d1:d0:af:e4:cd:ce:47:f9:94:98:34:a4:
         24:a2:bc:2b:f3:c3:20:24:79:14:a6:a5:26:92:54:93:b6:85:
         d5:af:c1:f3:dc:a5:7b:a4:f6:6b:fc:0d:e5:76:44:cb:b4:ff:
         fe:20:5d:9c:75:aa:7e:4f:ea:fb:57:15:6a:a8:0a:7b:53:91:
         5d:fc:57:da:d7:73:12:d3:35:6f:bf:fe:7e:8e:8b:f9:bd:59:
         78:ae:7e:f3:7a:0a:e4:37:8e:97:cc:3a:ec:d9:07:53:a3:89:
         78:e0:d9:3c:6e:30:f6:5e:8a:46:00:0c:d1:d8:21:a1:04:26:
         83:14:70:e0:67:98:b4:5a:17:47:2b:05:df:6a:c6:2d:07:88:
         8e:c8:52:8e:7a:bc:96:ef:c6:f7:7c:e8:58:7f:d1:84:2d:22:
         16:0c:7e:d9:01:d7:a2:2e:0c:ec:d7:1f:9a:85:be:32:9d:19:
         6b:69:8a:89:48:fc:ae:d2:9e:3e:bd:eb:f6:9d:9b:79:9d:8c:
         e0:f3:00:45:8f:97:0e:89:3c:39:40:9e:48:75:fd:3c:e7:3f:
         37:63:99:2b:6a:df:51:36:6b:a1:4f:d7:15:cf:54:db:29:c8:
         17:b2:ba:25:fd:68:c8:44:2b:cd:ec:01:b7:38:c0:6c:6f:da:
         fa:35:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:46 2026 by rpki-client