Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa
File:                     c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa (raw, json)
Hash identifier:          YhK4ndbib3z/m9zvsXQgGKpnFPoEW/i20pSi7PEJfEQ=
Subject key identifier:   9D:87:B2:1D:71:B2:5F:CB:6D:44:F0:09:FB:0A:37:6E:2B:DF:11:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79ACADB6C5613242F44EE58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396583
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:ca:db:6c:56:13:24:2f:44:ee:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ba48ccb4-a619-4928-9717-9c5ad8fa6f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:c7:ce:54:25:c0:72:5e:e4:2b:5c:e6:19:
                    2c:93:9c:69:e1:af:11:c8:55:52:ca:ce:8c:1f:4c:
                    1f:5e:a6:02:8c:73:65:8b:3f:7f:c3:cf:45:d0:b6:
                    77:c5:2f:09:e3:1b:26:e3:5d:56:7b:c0:09:2f:0b:
                    9f:6e:b7:db:81:32:c9:40:b0:31:2e:61:44:23:90:
                    ff:86:07:03:61:90:48:9e:da:7c:71:0c:6b:d4:9d:
                    f1:3f:00:86:de:87:15:7c:68:df:16:88:a1:8d:b3:
                    c2:54:0b:62:56:7f:d1:c3:24:df:af:f5:f0:54:eb:
                    1d:f7:08:82:00:82:9d:86:80:ea:60:65:ed:74:bf:
                    67:ac:19:e9:4c:0c:36:78:ce:a5:72:d3:39:5d:02:
                    0c:62:c0:08:27:56:4a:76:56:e8:89:22:4b:fb:4d:
                    6b:f5:50:53:4b:0e:28:50:4d:9c:79:89:f0:4d:0c:
                    8b:b5:9d:e9:e1:69:7e:6c:6e:54:0e:ed:a3:30:7d:
                    ed:c7:63:e0:5a:d1:50:92:e1:9c:9b:73:35:4f:6d:
                    fd:58:67:83:ba:1b:4b:08:a3:d8:be:0f:60:6f:8b:
                    87:44:e4:21:99:15:1d:73:b3:50:7b:04:b9:0b:cf:
                    6d:06:4d:67:58:fb:d8:67:a8:dd:18:17:fc:73:b5:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:B2:1D:71:B2:5F:CB:6D:44:F0:09:FB:0A:37:6E:2B:DF:11:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:dd:21:0f:3a:15:12:e6:a1:38:72:45:2f:af:bf:fd:38:
         40:76:33:14:64:a4:25:2e:42:62:e6:b0:67:e6:19:09:c5:48:
         87:a4:40:67:b2:31:e7:d5:26:87:50:2d:8d:15:df:f4:a3:40:
         69:74:71:78:11:0f:42:d7:b6:31:f7:85:a6:ce:23:d6:82:2b:
         b2:e3:f9:09:66:4e:28:17:c6:a7:b9:fe:bd:d0:11:8a:66:f9:
         fa:20:02:42:a9:79:77:34:19:4a:7e:b6:86:0d:18:05:70:99:
         0c:7b:89:60:74:58:ed:af:5a:fa:03:99:77:5d:94:fa:70:21:
         3f:51:60:b0:6b:d7:d2:00:d9:24:52:9c:5a:e2:da:89:46:6d:
         a0:5d:b0:52:51:dc:54:5d:b4:bf:f6:62:ac:ec:54:f0:7b:47:
         23:46:09:33:0f:7f:de:46:27:76:39:fe:f7:48:21:56:10:31:
         26:a1:d6:e3:39:11:b6:91:42:78:fe:eb:26:22:69:25:cb:2d:
         64:e1:75:46:68:f4:08:6d:f3:5b:d7:47:54:de:5b:10:8e:c6:
         15:3c:f8:79:24:b5:e0:98:5c:a2:15:05:6f:4c:a7:de:b8:b9:
         50:c1:f3:6a:0b:ba:6f:a7:aa:c0:75:d6:8c:16:3b:67:d7:22:
         f3:e6:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:38:37 2026 by rpki-client