Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa
File:                     0fb06a1e-154d-3c71-a36a-eead65795a82.roa (raw, json)
Hash identifier:          igkoZE5dtW7t01a1kEqfeWJu8mDXITjB0gHx9cgsZhc=
Subject key identifier:   1D:CE:C7:FC:3E:D3:43:0F:E6:28:37:DF:FA:1A:A8:8F:32:0E:DD:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793CF205B2EC93F0B55D540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397194
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:cf:20:5b:2e:c9:3f:0b:55:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c77a9e84-d112-4a55-86eb-679861db2b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:65:fe:cb:52:54:77:91:32:ee:69:f7:19:
                    cd:00:05:46:12:de:67:53:1f:b9:6e:da:6c:16:f0:
                    f7:18:cb:66:a4:1c:ae:a1:09:3c:26:f9:be:44:e5:
                    e7:67:0b:b2:01:6e:48:72:08:3c:2a:3f:41:18:f0:
                    1e:e1:9e:5d:0c:6d:2d:c6:89:19:e8:93:17:a7:8d:
                    de:f0:b1:a5:fd:58:9e:c3:f2:32:8b:3a:03:18:e4:
                    c6:8e:61:fd:b0:76:ac:58:d9:e4:fd:87:06:06:1a:
                    8f:f7:df:11:ba:ba:03:dc:2e:30:96:f7:db:8f:1e:
                    40:a8:dc:ad:41:40:89:43:9c:0d:84:09:1e:c6:93:
                    84:68:44:89:6b:44:36:7f:d5:d5:a5:3c:48:71:b7:
                    8d:65:ec:7d:3f:23:62:03:2c:9d:cd:4c:ab:69:61:
                    f6:db:f9:13:1f:67:68:8d:af:86:4a:f3:1f:a8:16:
                    83:b2:42:71:3c:5a:64:07:c8:fc:43:cf:fd:4f:25:
                    6e:18:08:5e:1c:98:45:d5:c4:0a:7f:57:60:38:28:
                    c0:61:d0:d1:85:8f:a4:f7:3a:7b:6d:ba:49:b0:cf:
                    33:21:e9:2c:a8:d9:aa:e3:e1:5c:9c:44:06:d6:4b:
                    7f:48:6f:e9:ee:19:5b:41:e6:f0:70:e5:71:e1:f4:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:C7:FC:3E:D3:43:0F:E6:28:37:DF:FA:1A:A8:8F:32:0E:DD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:dc:0e:94:06:14:b3:bb:f9:a3:7d:ae:a1:16:24:d3:ef:
         08:2f:98:82:54:4c:b2:94:20:b4:77:e4:91:e3:72:7b:95:ba:
         13:b4:ed:12:41:11:38:59:17:89:93:5a:7b:4d:de:86:d3:ca:
         11:94:e1:9d:2c:0f:47:6c:ca:eb:43:ca:ed:54:ed:57:0f:07:
         30:53:38:fc:af:c2:2d:8a:ba:71:01:b9:1f:9c:09:09:4c:8f:
         93:35:36:8c:da:ef:83:53:f1:b5:e4:5c:c4:66:75:99:40:47:
         b7:7d:a2:89:5a:b6:14:85:3b:d5:1e:29:bd:d3:05:d0:5d:f0:
         57:9c:4b:2a:2f:dd:dc:6f:03:c4:44:c7:f8:ce:d5:17:c1:56:
         8b:b2:3a:57:79:e6:9e:1a:0e:66:c6:e5:89:29:aa:5a:d4:f5:
         3d:4a:c1:ba:2c:ae:6f:0a:e8:19:3f:cf:8e:1e:f3:eb:b3:da:
         4c:90:b3:c1:2b:4e:e0:49:7a:01:7b:fa:2d:4e:31:87:09:43:
         20:93:6d:4e:fa:df:5a:ba:69:d5:8c:68:55:20:f8:bf:c3:cc:
         fc:fe:f1:51:84:ba:85:08:5b:7c:a2:fa:cf:aa:de:c8:10:b7:
         2f:b1:13:e4:43:45:55:e3:45:c3:e8:67:4a:22:42:ce:39:38:
         cb:ec:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:30 2026 by rpki-client