Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa
File:                     bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa (raw, json)
Hash identifier:          ZPbVCuRg50W9UzuuCY0L3aCDbmRmLd/bmlIeojywA7g=
Subject key identifier:   16:C8:85:C4:74:14:C1:16:07:B9:E7:1F:F1:7D:44:AD:4A:73:CC:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006364CFD11182CFA5EE680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396575
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:36:4c:fd:11:18:2c:fa:5e:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=cf5be916-1f12-415f-b492-ffaaa9de9384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:43:07:0a:d7:e4:af:22:e3:d6:05:30:8f:
                    01:8b:1b:f9:7f:38:14:eb:c2:a5:a1:55:77:c4:ab:
                    0c:db:d1:ea:d9:62:85:59:ee:80:81:04:1e:19:27:
                    89:6a:04:ef:29:d2:be:b4:b5:2a:32:52:76:88:d9:
                    c9:8b:f7:56:8d:91:f9:90:ec:37:e3:1e:eb:1f:03:
                    23:19:d3:0e:ad:ff:91:9b:06:b6:5b:5d:e4:16:1f:
                    5b:11:f4:ca:58:b3:e6:88:2a:22:76:0b:98:ea:87:
                    f2:4c:3d:f7:a3:80:d1:8f:be:81:12:fb:ef:ba:1c:
                    2c:f4:4c:25:ab:92:61:95:fb:b0:44:95:9f:3c:46:
                    92:08:e8:2b:b1:53:5c:76:f1:25:d1:45:d6:60:08:
                    8d:33:1d:d6:e5:f4:17:1d:ec:c7:2e:e6:37:23:a9:
                    5f:eb:fa:50:35:86:82:fc:ae:d4:65:50:93:c9:73:
                    f0:aa:50:03:3c:a5:b8:24:a0:c0:d9:e4:4b:1c:c6:
                    ca:92:5a:2d:ff:79:c0:e6:c2:75:85:fb:5a:05:76:
                    7c:ec:f3:1a:ca:24:7e:63:97:f5:a0:f5:8d:8f:ff:
                    8a:a5:50:06:e0:74:fd:1c:a0:12:0b:2e:56:d1:a6:
                    5f:e0:23:8d:05:54:95:fb:40:25:67:48:7e:d1:d5:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:85:C4:74:14:C1:16:07:B9:E7:1F:F1:7D:44:AD:4A:73:CC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:af:3d:86:e7:cb:af:02:e9:26:31:88:33:bd:00:4b:a1:1e:
         18:b4:d0:04:bd:8b:8e:8f:68:8f:d8:8f:73:d8:23:71:50:b0:
         ed:d1:d4:c1:8f:3b:9c:40:29:4a:b5:60:bc:fa:42:d6:a8:43:
         5c:6e:e2:d4:ae:75:43:3e:e7:02:2d:d4:50:00:e2:99:95:d3:
         ee:d8:4a:66:2d:42:ee:2e:44:f5:a5:37:e9:dc:62:f9:4a:af:
         8c:2d:ea:a9:e1:bf:c6:e3:f3:85:f8:a1:f5:2f:3b:61:ac:10:
         0c:43:90:b8:34:14:5a:25:80:ab:73:02:f7:64:f9:58:16:07:
         17:c8:fc:4e:9c:0c:70:f6:36:90:c1:5c:7e:f7:c0:f0:d5:da:
         96:b7:9f:ed:a5:45:8b:3a:f2:db:68:a6:eb:ba:78:fa:6a:c6:
         3f:40:5f:7c:40:9d:22:9d:20:5f:7c:40:48:3c:76:d3:3c:6a:
         c6:1c:08:87:de:2c:f4:86:e1:96:c4:0c:2a:40:23:fa:4f:e9:
         ca:68:36:56:ea:37:b9:4f:3a:7b:bb:b2:37:fd:80:c4:b2:40:
         f2:09:b6:0d:bf:71:64:d3:87:1d:2c:a5:55:66:2e:ef:5b:eb:
         4a:fb:6a:56:35:1f:78:ce:cc:69:f8:22:fe:81:7e:fa:af:7b:
         b2:6d:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:11 2026 by rpki-client