Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
File:                     ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa (raw, json)
Hash identifier:          vgjPQbzWX4JX9K51HqQuKPhhsfP5ztImVmSYwhUsLhg=
Subject key identifier:   4B:6D:50:71:94:83:85:C2:94:92:AA:78:5D:13:16:88:60:DC:23:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793CFC15F087C6F121AC080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396562
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:cf:c1:5f:08:7c:6f:12:1a:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=887ecec8-fd64-492f-a9aa-0b0db74b4d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:d3:26:01:b2:97:3a:45:82:b0:ac:24:ee:
                    4d:8a:2a:95:14:6f:5b:66:d0:30:55:51:47:84:46:
                    8d:12:60:49:f7:d9:60:0f:94:20:90:72:bb:1b:35:
                    46:67:b5:03:4c:92:19:51:3a:33:fc:0c:e7:58:ad:
                    eb:22:de:8f:6f:74:30:ca:0f:99:8a:1b:d3:8d:48:
                    70:32:b0:9a:aa:f9:70:25:86:20:1b:6e:32:e1:d6:
                    e1:95:9f:5d:03:44:e7:49:a8:f5:0c:31:a4:5e:ef:
                    60:00:f8:8e:50:da:36:2f:e8:95:29:9f:17:5a:3d:
                    0b:51:02:cc:fa:89:15:d6:08:e1:40:49:e2:c8:3e:
                    64:3f:0e:78:f9:12:f7:6d:85:5f:51:50:70:ca:1d:
                    4b:d2:f5:37:25:ca:7e:87:24:63:8f:6b:18:cd:c7:
                    ea:9f:d2:6a:4c:82:ef:a1:c4:2d:51:0b:07:5b:6d:
                    4c:59:ae:e6:a5:b8:a2:da:24:b6:19:eb:09:44:9c:
                    8e:9f:e6:f0:52:f4:1e:80:99:61:53:b9:23:c1:45:
                    fe:18:71:e3:a9:a9:19:06:8c:4a:a5:be:67:e7:8e:
                    57:d3:d1:30:4c:62:a8:7c:a2:09:09:00:a3:eb:1a:
                    0c:c6:61:0d:1a:d2:42:4a:65:c9:33:5e:a7:e8:c7:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:50:71:94:83:85:C2:94:92:AA:78:5D:13:16:88:60:DC:23:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:15:75:80:a5:d3:57:25:7f:71:f3:f4:7e:af:99:d1:82:fd:
         16:41:51:ad:4e:3c:11:a9:28:50:a8:4d:d1:7b:fa:5e:e3:f2:
         c5:54:9c:2b:26:ec:a8:4f:be:63:a4:43:92:05:26:94:9f:45:
         9d:8c:56:81:0f:0f:66:cb:55:e7:ac:b3:47:82:9c:92:f0:bb:
         1e:a0:03:e7:78:56:a0:8f:90:7c:da:ba:bd:14:69:98:3b:26:
         70:d4:e8:c1:c5:1f:24:ce:dc:89:1f:46:43:b9:de:4a:fe:5e:
         0a:49:31:dd:84:8e:96:45:df:7d:63:47:d3:92:b1:49:24:f0:
         40:88:f5:c8:ad:40:59:85:ec:9a:21:9c:96:9c:7d:89:3d:9b:
         bb:8c:e0:d0:ac:f7:62:42:78:91:49:df:fd:46:d0:f8:51:fc:
         9a:67:a6:11:d4:cc:49:6f:57:b2:96:16:91:23:9c:4f:41:25:
         7c:f7:a2:d2:5a:c0:0e:1d:52:dd:5b:f4:cc:1a:12:7f:72:4c:
         6f:a9:03:7b:5c:36:ca:3c:cb:a6:3f:99:e9:f4:4c:48:38:bb:
         73:1e:34:f4:7f:51:23:bc:e3:f6:21:4e:cf:26:92:8d:ad:0a:
         4e:58:35:f8:5e:f6:2e:32:7b:d7:82:3a:b1:93:71:9b:22:d0:
         41:bc:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:27 2026 by rpki-client