Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa
File:                     d992524c-c612-37e6-b92e-35135b6dd7d1.roa (raw, json)
Hash identifier:          D4kIUFjhBby4tPuHfjbQq9uEmZDZuQmfeVUGvoGm99w=
Subject key identifier:   F1:DA:F2:C3:0E:71:73:96:84:C5:E1:E3:4D:0D:26:E5:61:24:65:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA70A00D135425ED5A0C4C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396602
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a0:0d:13:54:25:ed:5a:0c:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=957b64f2-4124-4c2c-83b6-1001d572742d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:89:83:a2:2b:14:84:bc:fd:3a:0b:f6:b0:
                    2b:b2:3b:72:06:0f:8c:c2:51:65:c9:ca:a6:ca:56:
                    12:b0:f7:e8:21:c2:50:29:70:37:61:f5:3e:6d:3f:
                    47:c9:d5:4e:10:3d:a7:58:c1:4f:2d:c1:3c:99:c8:
                    4a:e8:d6:b8:6a:5a:d9:07:cf:7b:27:df:84:88:54:
                    99:fa:d1:6e:d5:5f:a7:e9:55:ce:fa:d4:62:59:d3:
                    0a:20:0d:61:8c:5d:b9:d4:92:50:1f:d5:b8:c2:a9:
                    ac:03:96:49:13:6d:14:e0:ab:36:70:3f:cc:f9:1a:
                    5b:0b:50:f1:9b:d8:c0:83:c3:37:ee:98:55:68:2d:
                    73:f8:f5:9a:68:a0:61:b0:51:5d:b6:3b:bb:a3:96:
                    9f:47:6f:94:64:0f:27:0b:2e:b4:fe:0e:e2:ca:b9:
                    b0:7e:78:8b:4a:4f:d6:40:07:05:d8:65:5f:7b:10:
                    76:8f:b6:3b:21:dd:ec:0a:1a:22:13:87:d0:d6:14:
                    74:af:10:76:6e:f6:ae:d9:0a:2d:5c:e0:19:d5:bd:
                    3f:07:45:35:5f:5e:ce:32:03:4a:4d:e2:87:36:5c:
                    96:23:92:f8:f0:aa:e7:cb:f7:ce:95:6a:eb:36:5e:
                    ad:05:fb:f0:1e:a0:ee:2d:88:08:9e:99:e8:11:01:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:F2:C3:0E:71:73:96:84:C5:E1:E3:4D:0D:26:E5:61:24:65:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:38:0a:a3:d2:3f:3e:a2:6a:ef:59:bd:1c:b1:78:47:cd:a9:
         80:41:45:f1:a5:14:fc:eb:60:8b:6c:3e:11:4d:3f:c2:77:90:
         81:37:38:af:fc:ec:fb:e5:e5:36:80:df:ed:c5:57:72:e7:67:
         6f:98:97:ce:3d:73:06:4b:74:b5:83:1c:29:bb:e3:80:ca:dc:
         41:6a:cf:bc:80:aa:43:79:57:70:02:b2:e1:c8:0e:f5:68:3a:
         66:5e:13:7e:a9:b9:2c:af:05:8a:fa:5d:6c:b1:d2:61:dc:7e:
         3d:b3:de:36:85:91:67:78:39:63:5c:46:b4:6a:5e:9b:dc:d7:
         c6:90:1d:10:53:43:f3:0e:36:ed:24:c4:22:f5:3d:f4:31:bb:
         e1:a5:f5:03:48:ed:5b:9c:e8:33:d1:18:e6:64:7a:17:83:a5:
         28:1d:80:dd:ac:7f:48:71:6d:35:eb:96:cc:74:2d:bb:06:fc:
         de:e5:24:64:4d:a9:fa:e9:cf:11:c7:6c:c8:20:24:f1:e0:e7:
         3a:42:6a:23:c8:30:af:c8:9e:cd:0a:2f:d2:90:fe:9a:69:49:
         f1:d2:28:11:4e:a2:bc:ca:ec:bd:72:bb:bc:60:21:a6:4b:0a:
         13:5d:9a:4d:1d:cd:46:ea:10:44:cc:11:1d:45:50:4b:88:71:
         70:93:40:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:47 2026 by rpki-client