Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa
File:                     707f0bd5-1cea-3891-84d3-18b231a0d140.roa (raw, json)
Hash identifier:          FDMwKf6VsqBa3AKgNzA1TtqOWuC5TkGnZ/uojOmq/NA=
Subject key identifier:   B1:BB:79:B6:2B:09:39:BB:69:14:FB:52:56:EC:38:2F:23:78:B1:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA8EC4F6607C23719B5738740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     396545
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4f:66:07:c2:37:19:b5:73:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=a4df955b-4c31-4918-acdd-f7961970275d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:e5:75:8c:c6:54:83:8c:07:c9:93:17:6b:
                    6b:50:f6:00:f0:5d:b6:a4:54:38:16:be:b8:f0:53:
                    66:89:79:ec:87:b6:2a:41:6c:76:88:64:08:56:dd:
                    a8:6f:f9:d7:90:94:4f:25:2a:09:72:8f:ed:0a:4a:
                    76:80:7d:ba:e7:53:5b:df:6c:d1:e5:44:12:df:83:
                    7a:26:6d:b6:be:c9:f7:fc:f2:b8:d0:fe:4a:60:99:
                    aa:34:2c:c6:63:0b:1d:0a:06:0b:e3:dc:9b:9d:d8:
                    e7:5d:a3:c4:70:05:75:53:3f:f0:35:89:b4:3b:df:
                    31:ee:39:6d:97:c5:96:31:f5:ed:e4:a6:11:fb:36:
                    40:02:51:21:1a:90:ca:37:66:4f:e7:d1:51:fd:3c:
                    e7:9e:fa:7e:2f:a8:6b:16:12:a3:32:4e:e0:23:b2:
                    98:98:3b:96:8a:41:97:e8:2d:cf:22:aa:19:f3:b0:
                    45:19:c2:42:68:13:3a:29:1e:ca:6e:f8:87:c4:3a:
                    9e:cd:22:90:6e:25:ab:9b:9c:5d:7e:c4:17:7d:a4:
                    d6:7f:bc:ea:ae:08:0b:2f:77:73:3a:c5:6e:ea:2c:
                    ee:78:d6:a2:d2:89:16:ac:b9:47:bb:95:fe:44:a0:
                    33:6e:12:7a:56:c1:ee:27:ad:ca:5d:a3:78:5b:2a:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:79:B6:2B:09:39:BB:69:14:FB:52:56:EC:38:2F:23:78:B1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:c3:3b:25:a0:10:70:6b:49:62:48:5b:cc:1c:9b:e7:19:
         c9:77:35:e6:0c:7d:9c:9f:bd:08:5a:e9:1e:39:1e:5c:5c:84:
         d2:20:88:3e:2a:f2:b5:09:fc:fd:46:b4:0c:83:f4:40:83:7c:
         ea:15:2e:bc:4a:30:24:a3:0d:15:66:64:fc:21:02:f2:ff:5c:
         5b:5c:7a:16:6b:0a:16:00:a8:8e:50:a1:68:53:d3:47:5d:5a:
         23:46:f0:d9:1c:0e:f8:98:64:39:3e:4c:87:38:03:6d:a6:22:
         c5:bc:c6:dc:b8:83:f1:55:24:93:5a:66:7b:50:c4:66:23:ae:
         5a:fd:67:6a:63:33:de:1d:9d:d8:20:5a:b3:ec:e0:60:96:c1:
         6f:a7:2d:46:45:b7:7b:f8:f2:3d:b3:e2:8f:77:2d:6f:97:1f:
         7d:c3:83:3c:c2:d7:d4:b5:7f:71:92:a3:36:3c:81:f6:32:6f:
         36:ed:eb:50:ad:94:36:d6:a6:b7:0c:2f:2f:cd:fa:94:d1:67:
         27:28:23:3e:92:2d:30:30:ac:89:5d:58:0b:c0:cb:e6:62:a1:
         10:1c:be:26:41:68:fd:a2:6b:66:17:4a:28:a4:d5:c1:f2:aa:
         86:46:49:a9:d9:c1:e1:43:0f:f2:e6:c4:87:83:18:83:b9:14:
         f5:9c:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:14 2026 by rpki-client