Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa
File:                     3abaaaed-9d59-3769-a115-7f9f64182337.roa (raw, json)
Hash identifier:          QCMBZRH8Sq6sNqDOk2VpO0guelJ+Zmcfmil5SBtJMjQ=
Subject key identifier:   7B:04:7B:ED:F8:24:03:0E:F9:AD:D9:C8:1B:C7:C0:E9:F6:4F:13:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79860E4C913540D3F3AC940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396582
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:60:e4:c9:13:54:0d:3f:3a:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=21814404-b4dd-455a-a064-aedc81e3f884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:25:39:e7:42:95:37:76:85:4c:81:72:91:
                    21:cc:b9:75:96:1d:20:13:c7:48:c9:12:ae:b4:a6:
                    e8:62:b0:63:e0:79:9b:c6:b9:0c:a5:37:50:f0:dc:
                    70:f6:98:77:20:a5:0f:f4:df:8c:82:b9:b7:14:66:
                    27:39:f7:2b:98:86:df:bd:53:a5:6f:99:f5:17:b7:
                    d7:a7:59:2e:c0:22:cb:34:0e:e9:d0:52:f8:56:f6:
                    a4:e4:7b:82:a4:5e:3c:4f:e6:c4:e7:37:03:10:82:
                    6d:88:51:16:42:79:e8:05:39:4c:6e:b4:83:8d:c1:
                    96:fe:e3:34:80:ff:88:28:11:a2:61:58:01:50:7c:
                    e0:57:a7:87:b1:36:10:38:47:91:5a:4c:bc:0d:99:
                    3a:d9:ff:55:20:8c:40:08:83:e1:85:90:1a:48:6d:
                    3d:fc:b7:7f:5e:3d:6f:c1:4e:9f:9a:05:57:7d:c7:
                    a6:db:4b:ca:55:e8:d0:e4:b2:f5:38:71:3e:50:4a:
                    0d:f2:5f:57:82:5e:12:71:d2:aa:a2:7a:6d:98:45:
                    57:12:23:91:41:7c:05:c5:4a:de:7b:40:b3:c5:41:
                    f8:bc:1b:b1:2a:e3:d5:79:a8:ac:68:d0:43:6f:93:
                    8f:c5:6b:e6:38:0f:53:b3:40:c5:d2:94:b8:8b:c5:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:04:7B:ED:F8:24:03:0E:F9:AD:D9:C8:1B:C7:C0:E9:F6:4F:13:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:9c:fb:cb:92:9d:62:37:75:f0:1a:e2:a4:61:0c:e3:4f:
         fe:9e:83:9d:98:a6:d5:5b:a6:bb:2c:d5:5a:2f:01:b1:f3:1b:
         06:e1:31:c1:df:6a:a2:51:1d:e9:9a:4e:40:a7:41:a6:6f:5d:
         dd:8e:52:a7:a4:b6:ff:78:94:12:4c:2e:b9:e1:a0:9e:b3:44:
         25:95:ef:0b:10:b1:4e:85:ed:52:c5:37:90:d3:e3:42:47:de:
         8b:b9:8e:aa:06:c4:f5:be:9f:87:43:29:18:d3:1c:86:2c:50:
         85:92:71:09:6c:4e:06:e5:3d:14:fa:9e:06:22:c0:5f:78:61:
         9c:a8:6a:f7:0f:55:45:8b:63:89:33:ab:17:df:38:92:b7:91:
         b7:a3:27:72:ef:4e:da:0a:39:28:fd:24:10:d0:20:83:ec:ae:
         f7:3b:9d:42:29:e7:e5:23:43:ed:ed:4d:86:35:4d:c3:8c:0c:
         f6:f8:69:4f:68:1f:ad:8b:c9:36:2d:da:33:8f:7d:3b:b9:50:
         f2:46:93:8c:fe:d6:7e:b7:b2:fe:7d:09:c0:18:c1:31:db:e6:
         0b:26:6f:97:1e:50:db:5b:f9:44:cb:b9:cd:bb:41:5c:71:4a:
         fc:c8:ac:49:c5:b8:22:09:14:93:a7:7e:7f:45:a9:58:03:82:
         3a:60:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:12:20 2026 by rpki-client