Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa
File:                     9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa (raw, json)
Hash identifier:          Ck/bhhFfpdOkCouSEQ7yNeQdhFkFHfOKg53AESz+is8=
Subject key identifier:   1F:D1:52:32:6F:66:B9:7C:A2:75:D2:77:77:C7:9B:5B:9D:80:2B:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709FF5C59644E0F2D31000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396584
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9f:f5:c5:96:44:e0:f2:d3:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=8a95b66b-fd4c-4095-bfa5-e9fbda3fe312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:cd:fd:c5:14:84:70:f6:ef:b2:a0:0f:16:
                    dc:fa:f0:0d:7d:4f:1a:63:f3:fe:fa:7b:f3:45:d2:
                    a8:f3:47:ac:6b:37:4a:de:a6:02:0f:61:94:32:da:
                    25:d7:bd:f5:6d:48:56:7c:12:53:56:b3:ba:70:25:
                    9d:97:78:87:3f:63:9e:e7:ba:91:34:68:06:e7:24:
                    81:4f:3d:56:d4:0c:54:c4:dd:bd:52:21:7a:76:5e:
                    55:a2:9e:b0:97:11:a3:a0:30:10:cd:94:29:0c:93:
                    69:c4:77:fe:b0:09:17:65:eb:a7:b9:da:dc:d5:7d:
                    dd:52:06:00:65:6b:25:dd:66:34:d0:19:a2:26:2b:
                    18:d9:bb:c0:84:c8:5d:7b:c1:50:71:8c:31:89:36:
                    2b:9d:ee:cd:cc:f1:7d:4f:ee:8b:05:4b:d0:ac:84:
                    b9:4f:ff:f4:64:a7:3a:36:b1:5d:47:f0:d3:67:d9:
                    a6:39:79:8a:db:a8:78:e0:ca:55:ca:2c:23:18:9e:
                    13:85:38:1b:92:07:c7:dc:a2:20:5a:0a:55:3d:5c:
                    5d:dc:a3:f9:d7:80:72:dd:17:76:b0:ca:ed:30:3a:
                    90:14:66:b1:e1:11:8f:f1:77:bb:eb:87:24:d5:f3:
                    ad:f9:8d:0b:dc:cf:6d:5d:4a:c3:a6:ef:49:0f:6f:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:52:32:6F:66:B9:7C:A2:75:D2:77:77:C7:9B:5B:9D:80:2B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f42f514-625e-3dd4-bbb5-a1bc069c0fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5a:7e:cd:6b:5c:3d:9b:cd:1a:24:39:f4:dc:a4:6e:55:30:
         f0:61:6d:66:2d:b8:ab:5d:41:9b:a9:9b:d0:b4:0f:b5:69:60:
         fe:10:cb:18:a3:33:af:15:2c:06:9c:25:77:25:73:d8:18:c9:
         91:c6:1a:f1:93:53:60:f7:ae:c2:f6:f6:5c:e8:46:bd:19:b9:
         d5:75:0c:60:65:22:c0:4a:b3:50:91:83:d2:0d:9b:2d:b3:ed:
         89:13:09:0d:ba:67:81:86:8c:f0:65:49:b5:a5:41:8f:b1:3f:
         b4:10:c5:e1:f2:fb:4c:c3:2a:8f:61:2e:cd:f6:36:28:b4:6c:
         6a:22:1d:64:d8:84:bd:1a:83:ee:2d:d9:47:33:78:19:f1:fe:
         cb:3f:43:5d:15:a1:26:5a:60:a9:a0:cb:d3:42:43:37:6f:aa:
         89:70:a0:d9:00:4a:00:3c:df:fc:3a:d0:90:b1:5a:35:d5:fa:
         94:fe:c4:4c:c8:27:9d:dd:de:39:b3:5d:97:a4:d0:43:5e:09:
         3f:2d:28:a0:cf:99:a9:a6:04:34:d9:2a:57:5b:c2:ce:70:bd:
         b1:0a:34:89:59:85:6f:40:b5:75:75:06:0c:2f:b3:02:cc:9f:
         68:56:7a:47:48:d3:51:ec:7b:61:93:51:11:9f:ca:08:a2:a5:
         11:e7:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:14 2026 by rpki-client