Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa
File:                     bf8655bf-4d32-34d1-9212-15f1632d728e.roa (raw, json)
Hash identifier:          maMmHkmt4Yw/z54mfelDcfGwPiYJHc1QHSBGTRMsBXY=
Subject key identifier:   F1:97:F3:3F:D7:E6:AD:B3:8B:67:44:D3:9F:BD:92:E4:0A:8B:05:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793CEE7713C0819EB919140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396546
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:ce:e7:71:3c:08:19:eb:91:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3024b87a-f4e1-4f29-a093-6cc5775640de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:25:17:c4:75:ad:5c:e3:e6:fa:45:ba:f7:
                    44:67:24:46:6b:21:d1:38:79:01:1d:cc:1a:90:f4:
                    70:59:2c:fd:81:5f:4a:79:d6:03:c6:15:ab:d7:c3:
                    e9:5b:01:73:64:d6:cb:65:9c:8f:99:0b:50:27:88:
                    f0:40:03:3c:92:c6:55:10:0f:27:ef:8e:bd:b0:90:
                    62:07:d0:b8:a8:8a:72:7b:92:3f:64:dd:d1:ff:d1:
                    96:03:29:35:72:18:50:22:40:85:b9:26:5e:32:03:
                    8c:2c:b6:9f:98:b9:6c:96:85:27:f6:32:30:67:d2:
                    d1:a3:cb:27:60:6a:8c:4f:35:6c:c0:5c:be:ec:d1:
                    25:e0:c7:75:67:ea:02:d5:82:b2:8d:cd:69:b8:ad:
                    e7:01:8d:e8:e9:55:e4:e8:8a:af:6c:d3:85:e1:50:
                    95:97:10:22:0a:7d:6d:d9:90:c8:e1:1a:80:d4:9a:
                    e7:ce:05:87:0d:a8:f1:11:9e:96:e3:78:1c:f9:93:
                    33:f2:a0:50:95:9d:b2:57:0b:cf:0a:e2:57:60:5e:
                    c6:a0:bb:83:10:ea:58:4a:7c:f5:e9:6c:60:bf:0e:
                    14:9b:87:fc:bc:41:1a:ad:e7:63:2d:ab:fb:01:9f:
                    e1:88:1b:cd:93:7f:85:38:34:6e:e4:56:1a:24:5d:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:97:F3:3F:D7:E6:AD:B3:8B:67:44:D3:9F:BD:92:E4:0A:8B:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:c4:9d:be:14:88:ae:a1:db:c5:d1:79:ca:58:1b:e9:6a:
         f5:ec:65:c1:c8:f7:1f:e3:18:6b:58:0f:a6:45:a9:e5:3a:ee:
         0d:e8:51:3e:20:f2:d2:1d:7a:2a:2d:1f:6d:2f:17:d1:aa:58:
         ee:31:a7:f3:4b:55:5b:ce:17:4f:4d:1c:c6:12:ef:19:12:b0:
         4b:96:40:7b:19:11:48:b3:e0:d7:da:41:77:51:c5:13:b2:fd:
         0f:68:df:a6:74:d1:3d:38:6e:03:c3:6a:5a:ae:a7:71:28:27:
         03:79:f7:a2:ed:0e:6d:23:8a:57:73:fc:3a:c7:1e:31:f3:07:
         6b:4a:9f:d1:ef:fe:08:d3:a1:f2:96:7e:66:87:5d:50:05:99:
         41:ac:a6:d5:aa:f1:0d:41:1d:19:c6:84:25:0c:18:37:9d:d2:
         c8:c9:36:2c:2f:e1:eb:47:c4:b8:ee:8d:f4:22:c6:b2:36:56:
         d8:ff:16:52:31:cd:13:71:ee:e8:c1:7b:1c:9a:67:68:ea:00:
         d2:af:7a:36:cd:46:dd:44:94:e0:03:71:e5:9c:e3:66:81:79:
         9c:f3:ad:71:38:e2:d1:7b:8d:30:eb:a3:b1:0e:f5:f2:49:28:
         35:1a:fe:ef:85:cb:b4:f8:ca:af:cf:db:93:1c:98:48:91:17:
         c2:0c:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:52 2026 by rpki-client