Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0445c246-37b9-358d-bf91-30d59ab2bcc7.roa
File:                     0445c246-37b9-358d-bf91-30d59ab2bcc7.roa (raw, json)
Hash identifier:          mc4E5ZGTUSEO6hVWoSUU+aZtRN+HasBB4bXlWLNcC9Y=
Subject key identifier:   5D:78:FA:50:7D:FB:E3:1D:B9:15:86:63:B6:B8:0C:1E:52:6E:23:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC77E9D266F004DEB3900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0445c246-37b9-358d-bf91-30d59ab2bcc7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397197
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c7:7e:9d:26:6f:00:4d:eb:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9795b52e-2491-44f0-b93b-d6bc7b885cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:92:2a:6f:cb:89:02:02:17:42:07:85:91:
                    65:d3:1c:dd:13:d1:6c:b2:82:6b:e6:e3:fa:e3:77:
                    ff:52:40:b2:9a:25:3f:a6:a7:29:7c:c5:77:5b:b3:
                    c9:9a:fa:5e:03:1c:6a:53:b5:04:1b:1c:d2:5e:e3:
                    00:d1:36:e6:b5:87:37:30:13:34:68:e8:04:11:0f:
                    74:75:57:43:cb:e4:a7:01:25:45:b7:dc:22:2a:86:
                    80:ae:7c:21:bb:ee:bc:69:53:d5:3e:f1:f1:a1:36:
                    06:21:6d:ab:5a:fd:80:d3:4b:58:74:4a:40:99:0d:
                    f6:8f:7e:f2:60:7b:b4:a3:d9:8b:cb:9e:00:5b:e9:
                    eb:17:52:69:e3:c5:ab:5f:10:30:49:7a:73:ee:aa:
                    73:c2:4d:49:18:c0:f4:0b:f8:14:28:22:dd:8d:b5:
                    fc:52:5f:3e:b4:d0:ac:67:f5:ad:5c:cb:49:38:4f:
                    e1:dd:1b:c7:96:d7:67:ea:81:bd:69:07:a6:c1:bf:
                    2f:b8:4b:16:b6:64:3c:52:47:e4:85:3b:db:8d:c9:
                    22:8a:63:5e:d4:5a:ba:9a:11:af:ac:54:03:07:3b:
                    30:90:f3:0c:9c:43:24:b4:14:94:65:4d:58:b2:80:
                    39:b0:84:b1:57:d9:15:a0:eb:ea:8a:ed:31:ba:16:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:78:FA:50:7D:FB:E3:1D:B9:15:86:63:B6:B8:0C:1E:52:6E:23:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0445c246-37b9-358d-bf91-30d59ab2bcc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:6c:ae:d4:1c:92:00:e2:6b:06:cf:c2:53:cc:fd:74:4e:
         74:3e:bf:9b:17:07:5e:c9:56:53:c7:54:79:e9:c2:d1:df:52:
         68:42:45:84:50:35:92:f1:f0:1f:20:71:86:6a:2d:ae:c5:a1:
         1c:77:f6:e6:99:de:1d:8a:66:5b:40:12:fc:a6:45:07:89:57:
         d1:ff:d6:e4:d2:69:26:3c:7b:b2:5b:f4:12:5b:c4:65:50:bd:
         ed:30:0c:76:f8:14:a1:72:b0:48:a5:54:74:c7:5c:58:9c:6f:
         ba:6d:da:0f:0c:c3:db:44:1d:11:db:ea:a1:af:d6:19:b4:06:
         58:91:e5:80:f2:11:a4:d6:23:23:8d:3d:5e:b8:c6:14:b5:ec:
         61:57:18:4f:ac:87:04:f8:a7:f8:8a:da:40:49:bf:6b:64:6f:
         7b:6e:fe:91:cb:81:60:67:8b:f1:40:f3:19:42:81:13:8f:4b:
         5f:bb:99:33:72:6b:4b:7c:4a:92:84:06:72:d9:30:6e:39:9b:
         f7:8c:4e:22:4f:a7:d2:e2:05:89:ef:c8:e1:0e:a6:bf:93:49:
         3e:ae:97:56:b2:c9:55:da:4e:23:26:2e:da:76:f1:cf:63:be:
         39:ed:b2:d9:79:fc:ca:79:12:7c:5b:11:5e:ae:fe:37:bc:99:
         28:48:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:13 2026 by rpki-client