Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b53a5fa-8de7-31df-a2dd-54a0d14247e4.roa
File:                     2b53a5fa-8de7-31df-a2dd-54a0d14247e4.roa (raw, json)
Hash identifier:          a5f/aZ+LKv+LTMh7fjqQ6oT5J75bOREpI5FEG9tO5H0=
Subject key identifier:   F9:4B:3B:72:51:12:EB:35:59:AA:F1:AD:3D:CB:71:D6:31:AC:2C:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788752370E463ABD51854C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b53a5fa-8de7-31df-a2dd-54a0d14247e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36626
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:75:23:70:e4:63:ab:d5:18:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ce99dbdd-4796-4937-b595-405e57b42be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:26:4b:fc:64:5e:d9:1d:fa:ce:9d:05:22:
                    a0:c6:48:0b:7c:de:fe:17:9e:55:9a:e1:b2:e2:62:
                    b7:c6:24:b7:05:d7:c9:f8:a9:15:7b:56:f1:d9:48:
                    b8:e1:43:d1:20:f8:b9:55:cb:88:7c:8f:85:0f:a3:
                    5e:33:e8:10:56:e1:dc:af:1c:3e:1b:ff:57:52:76:
                    06:c4:47:42:6c:0a:dc:48:ec:63:e5:8b:f4:d4:87:
                    52:65:6e:5d:bb:1e:cc:65:69:e3:64:5e:08:03:f4:
                    f0:3f:a9:29:d5:e2:7d:c0:ad:bc:11:67:05:74:5d:
                    60:08:b9:33:34:7f:03:a8:a7:05:1c:78:78:86:46:
                    55:27:c5:64:19:e3:f1:86:c0:95:a8:ba:62:25:42:
                    1e:91:86:14:b8:f2:8a:d3:0c:c8:02:bc:e2:b0:e9:
                    13:ca:2d:04:b6:54:e7:99:49:a3:59:7e:fb:f7:fa:
                    61:c0:be:f0:2f:73:f2:92:be:89:98:e7:42:04:85:
                    a5:45:3d:d0:6e:98:7f:26:89:9b:b5:2b:ee:dc:28:
                    d0:39:9e:a0:cb:09:6e:69:5c:c2:0a:29:9f:57:f4:
                    d0:08:9e:f7:97:a2:27:02:8c:39:83:22:15:e4:e8:
                    df:70:85:81:6e:dd:0d:b7:45:1b:67:0f:49:df:0f:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:3B:72:51:12:EB:35:59:AA:F1:AD:3D:CB:71:D6:31:AC:2C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b53a5fa-8de7-31df-a2dd-54a0d14247e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bc:79:34:7b:1c:03:07:18:68:a1:45:b5:71:7e:a7:7d:a7:
         d2:b3:e0:01:88:d7:b7:e3:6b:aa:8c:a0:c9:da:48:a3:fe:c3:
         ea:88:bd:33:23:66:6f:6f:29:04:64:d8:56:56:f1:1a:c0:cc:
         92:78:27:54:83:1d:24:7c:b7:cd:17:97:44:3b:e6:64:24:c0:
         c8:09:52:10:56:c2:23:ab:65:e8:5c:72:22:92:d9:b9:a2:31:
         40:45:00:d6:ba:48:22:80:0f:38:81:9d:9c:6a:e5:63:0c:be:
         08:7b:7e:4c:50:52:be:16:27:36:e9:21:9a:f0:ef:f6:bd:ec:
         c7:8a:a8:0a:25:bc:43:90:44:d2:e3:6d:96:d0:04:71:8b:be:
         9d:45:74:49:38:64:c2:8e:5f:d0:34:4b:2d:56:d2:13:b5:f5:
         3b:b3:4e:a8:29:83:a9:1d:fb:0c:a4:9c:82:24:4f:61:fc:8d:
         a0:f9:2e:cf:18:0e:4c:7e:5b:68:3d:f5:30:16:d7:a4:25:d6:
         94:28:9a:47:4e:a0:10:5f:01:d9:ba:10:95:68:92:14:fa:18:
         b5:4d:ab:da:3e:16:1e:99:96:53:8c:a3:ba:f5:02:5f:e8:9c:
         8a:cc:2d:f9:75:b2:11:d7:10:cc:11:20:90:c3:af:ea:d1:82:
         d0:34:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:55 2026 by rpki-client