Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
File:                     baa3bdde-11fd-3f3c-b057-d89d19787b73.roa (raw, json)
Hash identifier:          HXZEicxFY3khsZO0OR6LDpcQvVM7LeiBLhxrYl6ZAJg=
Subject key identifier:   BA:13:2C:65:77:DA:A3:D6:1B:DE:EE:78:10:04:BD:43:5E:4B:2D:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006065F9B66025BFE541E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396555
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:06:5f:9b:66:02:5b:fe:54:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e7a7055d-a2e9-4486-b10e-eed9c8ed3d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:a2:27:e6:15:25:3f:10:aa:54:79:c8:9c:
                    50:10:a3:e5:9d:b2:8b:36:01:55:6b:98:1b:fa:b4:
                    b2:35:12:59:4a:e5:02:54:42:6d:bb:9d:a9:4a:e4:
                    6e:94:ea:36:37:77:d0:2b:e6:36:9a:c4:2e:9a:db:
                    8f:67:07:22:1d:3b:02:fd:a8:9d:7c:79:65:ec:72:
                    00:19:e7:d6:1b:d6:98:fc:ea:21:4d:3e:b5:22:dd:
                    a2:49:0f:67:4f:47:42:df:82:3c:67:85:9f:fe:65:
                    3c:cf:55:7d:26:96:cc:64:f7:f3:6b:09:90:57:49:
                    3c:5e:ae:02:bb:83:f8:af:25:95:da:c9:06:10:83:
                    26:f1:0c:8a:16:0b:1e:15:49:09:20:65:a4:6a:95:
                    01:ab:ea:47:4c:87:53:87:51:22:74:15:5e:a0:b2:
                    a3:b7:83:97:38:14:2e:db:85:6c:c8:d8:51:50:4a:
                    d9:16:f1:dd:47:cc:c4:2e:04:7f:8d:b2:ba:ac:a4:
                    e6:c0:fe:73:e1:78:a3:5b:42:79:0e:17:94:54:8d:
                    1f:b4:2b:97:8f:3a:1b:88:20:22:81:0c:e9:a1:27:
                    29:24:06:5c:46:a4:2b:88:10:2e:a6:87:14:9f:84:
                    83:4a:b8:07:30:2c:0b:d1:d8:f6:70:2a:08:40:40:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:2C:65:77:DA:A3:D6:1B:DE:EE:78:10:04:BD:43:5E:4B:2D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:27:a6:43:5b:bf:c6:6b:21:f5:44:4a:f1:ad:5e:ce:b6:fc:
         e4:a3:b5:29:36:e2:0a:2d:80:fd:76:c0:66:e3:71:47:9c:da:
         b9:c1:82:ec:cb:c0:b3:32:4c:94:51:ee:67:b3:7a:87:24:41:
         e1:69:fb:df:80:4a:e8:ba:8f:6b:9e:7e:23:4d:bf:9e:31:d2:
         fc:b3:6d:17:42:0c:b8:e9:ee:1b:2a:71:14:2e:bb:e7:c6:73:
         cd:de:41:de:d7:60:6e:0d:d6:3b:82:c4:ba:81:82:ba:75:10:
         23:71:2e:e8:c7:82:9e:04:a2:3c:82:f8:9e:08:86:ae:c6:ed:
         e1:65:be:8e:2a:3f:06:6b:94:4d:65:1e:12:28:c9:fa:00:45:
         94:20:00:e0:74:1c:58:23:30:8e:bd:bd:d8:97:04:b0:2f:00:
         67:09:95:6f:5b:30:ed:2d:ec:61:ff:3e:46:71:25:03:c2:a6:
         cd:bd:9a:aa:75:72:91:b2:9b:9b:ef:c5:4f:53:9b:f9:27:7f:
         fd:13:8f:b2:04:e4:e8:7b:dc:7c:a2:e5:eb:31:88:e4:6d:22:
         4a:8f:43:ab:fd:64:94:24:96:77:59:ae:e7:b6:91:53:4c:e4:
         af:4b:b1:d7:73:91:0a:ad:cc:6d:b1:a1:18:f3:44:4e:36:79:
         62:8e:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:05 2026 by rpki-client