Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aa92f31-b5cf-32e2-9092-4da41d2416f8.roa
File:                     1aa92f31-b5cf-32e2-9092-4da41d2416f8.roa (raw, json)
Hash identifier:          qyBg2PbIkpvXQ77P7l6oXW86uehq3/e36lWje12ll1s=
Subject key identifier:   56:F4:BA:22:98:FA:7A:C8:DB:6F:ED:03:FA:FE:0A:67:85:A2:E2:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA8EC4F046E1A2E685FA36190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aa92f31-b5cf-32e2-9092-4da41d2416f8.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     40717
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4f:04:6e:1a:2e:68:5f:a3:61:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=824ed88f-a443-4f4b-a593-98a547f1177f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:7e:f7:67:03:80:ae:da:bb:c8:fd:8c:d6:
                    70:f3:88:e9:a3:2c:ec:35:5b:75:0c:37:b9:ff:a2:
                    45:00:7e:71:65:6f:39:13:a0:fe:55:83:32:a2:5f:
                    01:1a:6b:d9:ee:4a:94:19:d0:d9:0e:27:9f:74:e3:
                    30:98:7d:f1:ae:7d:ee:dd:91:4c:2d:c9:bf:53:15:
                    61:1b:3d:9d:44:8b:58:03:9b:ee:aa:cd:f7:a4:04:
                    00:0a:79:a5:10:24:2f:99:56:98:ab:d5:57:84:f3:
                    b1:43:1b:40:9f:7f:b0:01:12:20:99:31:58:13:4a:
                    18:55:2b:ee:43:eb:c6:03:ef:30:2e:1f:fc:38:69:
                    3c:3a:46:3b:80:21:d2:64:29:65:74:e4:98:c3:ab:
                    7d:73:7c:d2:bc:f0:93:95:07:63:84:21:6c:cd:35:
                    87:b7:ab:3d:39:96:30:7c:d3:38:89:7a:a5:6c:ab:
                    d8:6b:67:21:fb:02:ae:e4:ce:15:40:16:ab:2c:fe:
                    68:ba:eb:2b:53:35:54:96:17:64:b4:dd:19:21:a2:
                    47:ae:61:14:50:bb:2b:74:5b:e3:71:94:ff:94:52:
                    b8:e6:0f:63:48:24:7e:4b:1c:81:73:08:d0:0e:a8:
                    0e:39:7f:07:8a:c8:ea:2b:9b:d2:13:10:40:d9:46:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:BA:22:98:FA:7A:C8:DB:6F:ED:03:FA:FE:0A:67:85:A2:E2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aa92f31-b5cf-32e2-9092-4da41d2416f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:2f:a9:39:29:fa:e1:11:3a:13:fa:64:d8:ff:b8:7e:bf:
         37:18:66:38:55:6d:c4:84:92:81:a5:27:a9:5b:6c:77:0c:28:
         09:42:91:73:e9:66:83:9f:f4:83:7d:31:82:0e:55:5f:40:39:
         61:67:7b:89:74:1b:39:b4:ae:4e:43:a7:42:fe:df:04:8b:e1:
         2d:48:0a:b1:40:e6:c1:fb:11:31:3a:2f:a8:52:3f:af:27:58:
         19:0c:16:c7:2e:33:d0:5c:cb:9a:b8:24:d5:5e:af:39:af:db:
         82:e4:74:16:9d:f5:a1:52:58:bc:c3:83:6c:d9:cf:de:a7:69:
         4c:c5:6e:aa:af:ba:63:4b:70:00:c6:28:e3:fd:30:6b:2e:f5:
         6e:56:60:8c:68:97:e4:7f:83:f4:9e:9c:aa:cb:35:d5:33:44:
         ad:1b:72:2f:0a:58:31:87:39:fa:dd:35:3b:f4:df:02:50:81:
         04:4e:b6:b7:e7:c1:b9:5a:1d:62:90:50:4a:d5:db:c1:94:65:
         43:ad:0e:ff:2d:60:fc:7a:0d:4e:aa:55:75:d1:c7:04:25:f8:
         b7:ba:bf:6a:84:b0:a9:2c:d2:52:46:20:d2:83:3d:91:e8:e8:
         9a:06:0c:4f:d5:88:3b:06:da:79:66:9b:b6:58:75:3b:a6:ab:
         ab:1e:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:01:59 2026 by rpki-client