Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa
File:                     ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa (raw, json)
Hash identifier:          8vSbs1hYTk41IBhoaS/6aN/1MaWveO31l+sX+Jk+5kQ=
Subject key identifier:   2C:4D:7D:D8:84:9E:AF:60:CF:1A:77:82:86:44:F4:71:C9:5E:08:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709E311FF31C5473CCBD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396599
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9e:31:1f:f3:1c:54:73:cc:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=2dc4b51c-3905-4d1d-86d5-5e076ded7f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:3c:dd:0b:b2:84:c7:de:4f:67:f6:3a:2b:
                    d3:20:78:40:4f:68:46:31:05:82:f9:44:e9:c2:da:
                    8f:ed:8b:11:86:4c:a4:27:66:b0:75:56:c2:ce:9a:
                    22:59:69:ff:9c:ef:f7:b8:df:a8:3a:a8:b8:4b:91:
                    a4:fb:50:86:6c:49:50:a9:bf:6e:ee:1a:60:7e:33:
                    dd:13:e7:07:3f:ba:e5:75:c6:ad:ae:51:a3:52:d9:
                    b1:08:af:2d:84:62:d0:01:5b:ec:4d:31:77:1b:5b:
                    9f:5d:0b:70:49:86:c3:cf:a0:f5:d5:56:1d:ed:3d:
                    22:18:d1:13:4b:70:8a:06:41:fc:8d:76:e7:93:7b:
                    b4:5b:d7:5c:f8:a4:40:ec:a7:93:14:0c:50:96:24:
                    50:15:76:e5:83:4c:a4:94:4b:36:d5:14:85:d2:76:
                    54:5f:de:ff:48:6f:47:d7:9f:96:59:8f:d4:20:40:
                    91:bb:30:84:8a:bd:2f:6d:df:97:87:3f:3f:d9:dc:
                    9a:a6:b6:9e:df:c7:e2:eb:84:29:c3:90:b4:6a:8c:
                    a2:90:fd:53:3f:f6:e5:f0:5e:28:89:f9:55:4e:f4:
                    09:9d:5c:9f:b6:da:8c:64:43:d3:5f:03:22:bc:33:
                    a3:7a:8d:0b:77:71:bc:13:96:d3:06:92:45:3b:a2:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:7D:D8:84:9E:AF:60:CF:1A:77:82:86:44:F4:71:C9:5E:08:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:48:03:26:7c:5e:2c:67:b1:14:a5:d0:e7:df:98:e6:be:
         03:69:f7:a8:59:ee:3d:9b:e5:48:bd:e9:0a:4a:a1:71:52:2b:
         be:8b:69:8d:98:e8:e8:9d:a2:b0:bd:fa:de:71:11:0e:14:94:
         f9:e4:e3:14:88:27:c8:39:a5:d6:2f:09:db:40:61:bb:a6:26:
         1c:e6:a4:61:07:ac:8e:98:f8:3b:6a:1f:eb:36:2e:09:3b:32:
         4b:26:11:65:2f:9d:a3:37:4b:a4:9d:0d:9d:84:4a:51:90:73:
         72:d6:c2:61:5d:e0:51:c7:78:87:12:df:5d:5b:3e:d9:e5:91:
         48:0b:18:13:94:7c:34:58:20:33:f0:fe:1a:1e:8e:37:45:ca:
         ac:29:67:2f:c2:cc:dd:fd:a1:d1:06:a1:3d:6b:85:ba:f5:a2:
         9f:b2:c6:d3:70:32:2e:65:3b:29:3e:0e:35:59:8c:8f:45:6f:
         4b:f0:63:f8:6d:55:9a:f1:04:d4:3d:cc:47:69:24:91:5d:fb:
         53:af:0b:e6:5e:28:c8:2f:65:a9:f6:ad:ed:61:02:ad:a6:ec:
         ae:5c:60:a7:dc:c0:32:3d:b4:df:eb:00:48:d5:55:3a:90:41:
         d8:78:40:c3:a7:a3:69:f2:1a:41:f0:30:39:a4:b7:b4:6d:67:
         97:fc:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:04 2026 by rpki-client