Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa
File:                     33a14981-d517-30e1-8cf5-7bbbbb28b356.roa (raw, json)
Hash identifier:          I4gwAOOpliQIrXwoBmp8xnM51Sq7eT8Fl8UxdAhSdxc=
Subject key identifier:   CE:6B:79:D3:65:EF:DB:EC:77:2D:B2:4A:C7:95:6B:8C:6B:58:62:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793A9A5B6DC5E8091EA1740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396551
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:a9:a5:b6:dc:5e:80:91:ea:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=71d4c058-515e-4019-96d6-f0249e71d212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:cf:d2:8f:63:e1:28:55:05:a5:46:36:10:
                    ee:99:89:b7:a3:17:32:d4:ba:00:e2:c2:01:35:40:
                    33:a2:ed:09:a2:6e:13:62:d6:da:87:17:08:5a:b1:
                    6e:42:13:ca:9e:d9:2a:3c:ee:ac:c7:73:72:83:25:
                    f9:33:af:25:40:b3:8a:ae:e6:c8:6c:55:18:02:aa:
                    bf:73:16:d8:4d:3c:1b:84:54:31:88:60:f1:2b:75:
                    4f:01:83:e7:48:97:fc:50:d6:25:0c:7f:cf:d1:de:
                    bb:1f:57:41:a5:8a:f3:a5:79:e0:24:b4:72:7b:12:
                    1c:57:05:5f:62:cc:0b:a5:ca:8c:32:88:12:17:8c:
                    39:ae:54:9e:8a:87:f2:3e:48:88:2a:76:f4:37:33:
                    a4:59:e7:98:f8:e8:ac:c8:23:27:41:0b:8d:6d:d0:
                    de:91:df:70:ce:09:74:f4:ab:8c:76:92:de:89:b5:
                    47:ab:50:b1:d9:59:c1:6a:bc:0e:2e:47:7f:81:42:
                    88:bc:1b:be:7e:dc:67:7c:d3:c1:fa:28:82:d2:e9:
                    77:7f:7d:ac:14:c4:c5:93:f3:34:84:15:04:de:b6:
                    93:e4:d7:ce:29:0f:fc:28:86:cf:45:b3:5c:f9:02:
                    8c:77:77:30:96:5b:6f:32:a7:34:f2:a9:70:96:b0:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:79:D3:65:EF:DB:EC:77:2D:B2:4A:C7:95:6B:8C:6B:58:62:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:a4:91:f5:97:c7:44:20:6d:24:64:27:5f:4e:d4:af:d5:
         d6:93:5d:86:1a:99:49:54:ea:54:c3:2c:57:31:e9:86:c5:80:
         b9:cb:a6:69:d8:f1:84:8a:60:29:7e:f5:15:08:63:67:0c:24:
         4c:09:90:40:fa:57:9b:10:bc:2a:f4:45:9b:da:c3:00:00:74:
         2a:59:1a:f3:b7:ae:e4:a9:17:8f:b8:79:b2:5f:97:e2:37:cd:
         78:3c:01:09:71:86:47:52:f4:8c:f4:8d:dd:19:1f:6d:5d:06:
         1e:65:78:53:88:a4:f0:79:49:1f:27:87:50:97:a7:df:b2:17:
         6d:7f:fa:e1:5d:7f:9a:55:8c:1f:8f:73:e5:9d:14:7e:de:d8:
         e1:34:3f:25:77:d8:f1:f9:30:62:11:2b:9e:3b:fc:01:32:8d:
         c2:7b:87:99:ea:c1:32:4b:25:a7:c0:37:73:bb:70:6b:79:fb:
         6f:ab:6e:14:f6:56:fe:ac:aa:84:fa:1a:8f:22:d9:63:43:f1:
         90:bf:21:f2:3d:4c:e5:77:89:e1:39:b4:51:80:5b:9d:2d:c0:
         45:32:57:e9:9a:8f:08:db:24:8b:cb:49:6d:c6:2d:89:de:96:
         49:fe:03:c4:d7:c8:48:37:e9:cf:b6:6b:3a:02:82:2b:04:01:
         fd:cb:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:05:54 2026 by rpki-client