Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
File:                     53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa (raw, json)
Hash identifier:          JjH1cwkpyMeuIWGGTv4XbDCiJz/MCBsMrlMRPS1G0BE=
Subject key identifier:   25:E4:0B:04:A3:7B:8D:0C:8F:19:1B:0B:75:68:A6:00:C0:20:7D:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F6F91FF50D9C7341E9000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     396564
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6f:91:ff:50:d9:c7:34:1e:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=ae27770a-2233-409d-a66d-d6da6f891ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:d1:67:5d:86:ed:9f:eb:d3:44:17:14:bf:
                    d8:a0:9b:6b:2a:ef:b0:27:42:ea:7c:60:0c:be:ec:
                    2e:b7:24:49:af:8c:d4:9a:95:0c:d4:24:01:55:a7:
                    27:6e:64:a6:12:f4:92:ca:69:8e:cf:fa:82:bb:bd:
                    0d:7f:43:ea:a2:ba:75:99:53:71:de:82:57:11:df:
                    9d:f7:0f:bd:1a:d4:9a:ff:35:ad:ed:4d:53:6f:5d:
                    1a:9a:88:6c:55:54:1f:67:68:29:f6:d7:e7:3a:fc:
                    4a:08:25:ac:ed:4e:1f:2e:a1:c1:e5:57:f8:c4:9c:
                    3a:5f:78:f4:1f:e9:c4:d2:3c:34:de:57:f1:7a:65:
                    6d:6a:b8:dc:45:3d:78:73:6a:d9:fd:79:de:89:72:
                    48:0f:fd:83:64:c5:a9:63:54:0a:c2:41:97:ef:06:
                    59:6d:9e:92:0a:29:39:ab:03:50:85:76:ab:e1:84:
                    1c:da:ba:ee:b1:14:57:50:8e:bb:99:db:09:de:2d:
                    d2:7c:81:94:fb:22:82:be:ee:f4:c7:2e:b6:74:f6:
                    6c:58:24:da:a1:2b:cf:9f:c9:7f:82:17:aa:b7:9f:
                    5f:67:1c:c8:17:ec:57:13:09:c4:86:9b:2e:2d:90:
                    55:69:e2:e6:b9:00:c2:fb:da:20:e4:f6:26:fa:bd:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:0B:04:A3:7B:8D:0C:8F:19:1B:0B:75:68:A6:00:C0:20:7D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:6b:dd:90:20:c4:31:aa:21:8e:e3:d8:6c:c2:93:52:44:
         78:48:c0:a5:d5:33:6e:01:97:ae:78:1e:53:5f:cf:a1:66:f3:
         eb:3a:5f:79:11:d6:fc:6c:1c:bc:df:27:fa:6f:84:4a:98:ed:
         23:7c:88:3e:a1:38:a2:89:bc:9b:94:7b:cf:33:2f:91:00:95:
         44:4e:da:59:75:62:08:07:9d:76:2c:f9:84:1d:13:f7:e5:1e:
         6d:ed:42:50:b1:2f:18:79:b4:20:ea:b0:29:bf:f6:7b:0e:89:
         ea:a6:7a:0e:74:24:8f:dc:14:24:48:9c:61:57:88:49:b9:98:
         b9:4f:f7:4f:0c:39:a1:02:4b:f8:0f:3a:63:9d:a1:67:dd:0a:
         08:91:46:b5:2b:eb:4f:80:a7:51:3b:6e:46:19:d9:87:af:5b:
         0f:86:90:b4:5a:99:ff:6a:d4:0b:c2:7c:9f:e5:11:ca:d5:c4:
         e0:18:2d:ac:fc:00:f3:f7:89:49:92:ce:2e:15:8a:24:c5:00:
         61:b3:66:a7:93:c5:d7:d8:1c:37:7b:bf:9c:eb:3d:5e:38:0e:
         e7:cc:e5:17:f8:d9:05:2a:e7:ce:a4:f5:be:c2:a6:af:0c:af:
         d4:3d:fe:84:91:38:28:f2:21:b7:da:20:e7:69:9d:c5:06:51:
         a5:1f:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:24 2026 by rpki-client