Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
File:                     65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa (raw, json)
Hash identifier:          cjUvF6ZYlZsbQ6VtI7cL5PaMc8tz/TpfvMLf8N8a0f0=
Subject key identifier:   CB:DF:63:77:B9:93:8C:1E:DB:E6:BE:5E:86:96:F9:6A:59:5B:99:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006061896803B16FFF03880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36621
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:06:18:96:80:3b:16:ff:f0:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f52b005c-9e94-48bd-b2bf-a22a37c02988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:bf:eb:ef:f4:90:ec:73:5b:78:62:3c:17:
                    f0:6b:4a:d3:d3:6b:d9:84:e6:61:e5:20:66:cc:86:
                    cf:95:85:47:7c:ce:70:e2:f3:86:66:a4:e7:d1:39:
                    fe:d3:6b:e2:fb:f9:25:6b:6d:df:a7:51:3e:db:4a:
                    6a:fb:28:e9:38:e6:29:a9:92:68:4e:d2:ea:a6:26:
                    20:93:63:21:b0:65:47:9a:18:d7:dc:d4:c9:2e:f7:
                    bf:3c:4e:c3:a2:ad:bf:50:80:39:28:6e:f1:be:35:
                    d5:a8:ee:ea:9b:e9:c7:19:3c:25:33:f6:e1:fb:31:
                    70:27:ff:4d:02:d0:61:65:60:fb:88:02:b9:77:1e:
                    c6:06:bd:5b:ca:0e:46:ed:d4:55:91:2c:3d:8a:03:
                    a7:19:4d:a5:04:84:db:93:a1:09:e9:96:1f:57:e4:
                    46:e7:3e:36:20:57:1b:10:6c:84:44:f3:8d:d8:07:
                    48:44:d3:e7:95:37:c1:51:94:9f:96:24:2c:aa:88:
                    66:1a:25:1d:91:2f:42:58:28:82:3c:77:60:1f:33:
                    92:d9:40:64:15:cf:f4:56:a9:e7:73:bf:5d:9b:0d:
                    66:3f:eb:9d:a2:5b:62:c1:4c:13:d0:60:d6:1a:48:
                    66:1f:1c:c8:16:17:4e:69:48:25:fe:46:f9:15:fb:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:63:77:B9:93:8C:1E:DB:E6:BE:5E:86:96:F9:6A:59:5B:99:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ed:79:62:ad:23:1e:a4:1c:4a:2c:02:0d:a2:c5:51:a5:2a:
         a8:38:1f:b3:10:45:ae:4d:e0:65:9e:db:54:49:df:3d:53:ed:
         bd:99:c3:25:49:8c:18:01:03:d0:fb:4a:ed:7a:9a:f2:9f:fb:
         8f:a1:e9:f7:ff:a5:1f:01:ba:d1:70:e8:a1:82:e7:0f:d8:8f:
         2f:4e:5b:cc:d2:7f:53:da:51:59:23:42:ff:1e:05:8d:33:ce:
         1d:a4:43:31:d1:0f:ac:74:c8:ab:8b:2c:26:22:aa:4b:67:df:
         36:c4:72:0d:a9:33:b0:55:7b:25:5b:ff:50:aa:ca:dd:19:72:
         27:2e:39:2d:d5:ca:6a:60:86:48:85:3c:a4:9f:a3:9e:e1:d4:
         c3:ae:ce:4a:df:56:f7:e1:d4:d0:6b:4c:98:b0:01:c7:39:be:
         a4:ec:a4:bc:62:2e:c8:ca:ea:4b:20:08:9f:8f:8b:f1:6b:40:
         5f:d4:cc:8c:76:42:fc:83:de:c2:9c:1e:5c:b2:7b:3b:e2:1e:
         86:27:28:fd:15:5e:01:e8:cb:d8:a6:bc:df:85:d8:0b:d3:68:
         f3:06:fe:3a:a0:c0:2e:ab:fa:54:0d:bf:55:98:dc:42:05:08:
         41:af:d0:81:4d:90:7a:bd:92:0a:45:92:35:d7:b1:80:39:92:
         a5:67:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:40 2026 by rpki-client