Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53632681-f3d1-322a-8c1f-96bf57b59554.roa
File:                     53632681-f3d1-322a-8c1f-96bf57b59554.roa (raw, json)
Hash identifier:          /pXxiUAs+1TPzzymkYYQ2xF1kD6ABOGbVzLaz4eVTW0=
Subject key identifier:   EC:CE:4E:9D:54:46:40:8C:CA:AB:A5:FA:1A:0F:E0:0B:1C:C4:9B:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11CB8D4B41076A01AFC400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53632681-f3d1-322a-8c1f-96bf57b59554.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396578
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:cb:8d:4b:41:07:6a:01:af:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=c27a6e5e-ff3f-4c31-9c86-823d1c9ee96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:3f:6c:52:0e:b9:76:40:a2:26:3a:12:ba:
                    f7:40:cf:6b:63:36:cc:43:5a:ba:1d:1b:24:2d:eb:
                    e5:41:b5:44:00:cb:28:f3:d4:7e:76:3b:df:9e:d0:
                    ac:72:e9:4a:91:96:1d:f3:6a:4d:43:03:1a:e2:72:
                    82:09:66:36:37:6f:6e:d1:18:29:e5:c9:f6:62:04:
                    ff:40:29:34:97:91:50:ae:2b:2c:44:0c:2e:b7:d6:
                    bd:da:f4:9f:67:7a:82:74:19:d2:77:eb:b8:db:df:
                    cd:7b:ab:f3:de:ad:c8:e8:44:76:17:dc:c2:a7:67:
                    bc:e9:8e:b4:9d:63:95:a6:67:3e:87:3c:7b:0d:d2:
                    e5:07:f4:ed:27:9d:fa:df:73:93:b8:06:af:03:1c:
                    ad:fd:32:16:b8:9c:04:36:7b:a6:19:7c:25:21:45:
                    93:36:3e:73:b3:e4:15:86:c1:1a:7c:1a:e7:4b:ae:
                    f2:42:2a:8a:ec:41:29:22:63:b9:cc:92:8a:15:58:
                    d7:42:42:d5:23:c7:a3:58:55:e5:76:fc:26:b6:ac:
                    8e:14:20:7a:ce:7d:ae:a2:70:a4:f1:02:36:13:10:
                    72:e0:c7:23:d2:f0:71:e1:48:9d:07:7f:0a:16:88:
                    aa:b6:8e:83:48:48:8d:4b:c4:d8:09:7a:4b:d9:8c:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:4E:9D:54:46:40:8C:CA:AB:A5:FA:1A:0F:E0:0B:1C:C4:9B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53632681-f3d1-322a-8c1f-96bf57b59554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:11:c7:04:fd:cd:dd:0a:84:36:89:ae:27:ba:f3:a1:e2:7e:
         b5:55:da:1a:e8:16:c7:38:5f:6b:2b:2d:b6:14:0b:49:31:21:
         ea:30:18:4c:aa:4c:53:56:65:ba:3f:1e:fd:f2:6e:7a:1c:87:
         b4:32:73:7a:fa:20:47:9f:d6:80:6f:de:3e:26:03:62:b3:8c:
         e0:d8:1e:11:18:37:f6:8d:68:4f:ef:1e:56:6d:8d:70:39:0e:
         08:ed:fe:f2:fc:cd:97:21:08:15:63:f3:36:00:96:95:e4:b1:
         1e:df:46:f2:15:85:39:b4:60:9c:50:64:97:71:0c:51:93:7c:
         17:f4:43:99:51:0d:cc:bf:b1:3f:e7:eb:30:45:4d:80:c2:90:
         94:9f:e3:80:e5:97:53:26:d5:6d:4f:4c:07:33:76:53:8c:9a:
         01:1b:2e:64:51:96:01:38:d7:49:06:1e:e0:4f:2a:21:b6:ed:
         96:e9:42:4b:43:f8:84:33:c0:be:05:7a:4c:7b:a5:c5:59:db:
         26:0e:58:e5:5b:99:4a:13:80:7d:a0:c5:85:b0:6c:d4:0e:29:
         97:28:45:4b:01:c9:3c:aa:0d:c5:34:88:60:0a:b3:45:2f:aa:
         b5:01:e6:c6:06:07:3a:72:2f:ae:2f:6b:44:c4:c7:39:49:1b:
         67:1a:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:12 2026 by rpki-client