Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa
File:                     a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa (raw, json)
Hash identifier:          Vm9WgaLd1xVmOI9Yn1ZC+OsLatHTC2CSAfLOXkBzDy8=
Subject key identifier:   5A:2C:D2:0D:84:AA:D7:70:F5:CD:31:E6:3F:C6:CC:0F:11:10:79:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709FDE6DE77603F4557AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     397199
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9f:de:6d:e7:76:03:f4:55:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=0e83eab9-048e-449a-860d-c06d1ecfa3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:e5:c0:b2:3e:ea:fa:9c:55:d0:ef:8d:82:
                    09:16:24:35:6c:f7:91:d3:99:ca:bd:d1:da:ad:2f:
                    88:12:cb:a6:45:6a:77:cc:21:91:f9:dc:c5:ca:34:
                    c5:e1:66:4c:1d:e5:72:c2:67:d8:e6:5b:91:00:1c:
                    87:73:46:ce:db:32:13:9c:4b:22:d1:4e:c7:cd:80:
                    c2:e5:69:31:73:39:85:dd:0d:40:cc:d0:35:cd:c4:
                    fa:66:ea:67:bf:b9:40:fe:0b:b5:39:f2:02:59:84:
                    42:57:26:89:2a:18:1a:f5:aa:9e:f1:cf:18:71:81:
                    0a:c6:ef:f3:6c:e1:98:f7:c4:67:ce:de:77:62:da:
                    f6:6c:76:99:51:eb:88:a5:94:79:4b:f9:28:66:d0:
                    f5:94:16:e6:42:b1:10:3a:b9:aa:c6:1a:cc:b2:5b:
                    c6:28:94:27:b5:2e:f2:5f:83:95:7d:a0:32:2a:b5:
                    90:7d:3b:83:34:75:0d:fc:21:30:03:27:b1:91:42:
                    b1:fc:8c:ec:c8:88:9b:9a:31:75:e5:4d:97:f4:9d:
                    08:55:7c:8c:03:4c:f0:ca:ce:dd:ae:e5:46:d4:bf:
                    6d:70:a5:f8:a1:ed:d2:3d:60:47:2e:9d:5f:05:49:
                    fa:90:07:83:3e:8d:d0:98:17:df:43:ef:2d:c1:6a:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:D2:0D:84:AA:D7:70:F5:CD:31:E6:3F:C6:CC:0F:11:10:79:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:bc:8a:8d:30:31:54:3b:3a:6b:d8:8d:3c:88:92:31:68:
         cf:6c:1d:b2:ca:5f:7a:0b:1e:c4:87:8e:8b:0a:15:2e:75:79:
         d5:2a:a6:15:f5:63:70:af:50:4d:5c:68:d8:18:73:c1:3f:5c:
         4b:76:55:6d:21:e0:1f:08:dd:ce:51:61:c1:27:b6:98:0b:5c:
         ae:29:7d:8e:15:0b:fc:58:3b:be:b7:79:bb:e1:ad:56:f6:9a:
         93:94:e7:ae:72:83:50:f0:be:31:46:dc:70:0e:47:45:9c:cd:
         0f:86:2f:8a:fe:27:5d:f3:94:77:0d:6c:f4:37:0e:fb:f7:77:
         00:8b:b1:a0:66:e7:10:c9:8a:2b:06:6c:a9:50:e1:f3:bf:bf:
         c6:14:ed:02:96:dd:4f:6d:de:f8:c6:22:ea:1a:10:82:8f:c0:
         32:d7:0f:9a:93:b4:c3:80:5b:70:3a:dd:44:be:68:02:b5:98:
         25:0e:0f:cc:54:dc:fb:7b:16:c2:c7:6f:cf:b2:92:f7:f2:e9:
         47:62:ae:d1:4e:72:78:db:10:1a:a7:49:f8:26:41:0e:78:f7:
         3e:7e:0b:b4:9f:73:52:0d:fb:c7:ed:db:c3:52:30:72:53:e6:
         61:32:e2:88:23:20:db:3d:f1:f4:58:db:33:d0:a4:da:b8:23:
         1a:85:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:52 2026 by rpki-client