Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191ce3e3-bf73-3445-871c-6b5c69450e34.roa
File:                     191ce3e3-bf73-3445-871c-6b5c69450e34.roa (raw, json)
Hash identifier:          Gg9yVw68H2W+OStOPFD0/1BcNr2nffJaL6BAxuINm8I=
Subject key identifier:   34:CE:39:87:76:A5:66:81:B3:2E:82:97:1B:D4:8C:67:22:D7:14:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7913BB50192A16C775F0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191ce3e3-bf73-3445-871c-6b5c69450e34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396584
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:3b:b5:01:92:a1:6c:77:5f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de16dc86-0bac-4863-a1af-a5ffdb157ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:c9:57:50:f3:ea:22:b6:12:07:34:2e:ad:
                    51:f7:c9:ed:d0:ed:54:ee:89:f8:0b:fd:d9:a0:ff:
                    eb:81:0b:82:eb:9d:bb:36:53:a8:07:3d:2f:0c:07:
                    c0:d9:40:bd:69:07:ae:7b:d2:11:c7:8a:84:5e:6d:
                    55:2d:c4:78:35:f9:35:d4:f0:e0:7d:03:33:81:5f:
                    e4:1f:06:e6:b1:9d:29:36:1d:93:d4:71:96:47:0f:
                    25:55:53:16:17:d0:7c:70:5a:05:f2:5a:f7:bb:72:
                    50:18:7a:5f:cc:39:13:3e:80:89:ee:50:a7:71:61:
                    8f:a0:01:a0:25:94:17:58:28:33:95:2d:1d:07:3f:
                    b2:c3:70:d2:b3:90:87:1f:6c:f7:45:01:bf:b9:61:
                    d5:7a:55:a1:77:ac:26:ca:dc:79:bc:5a:c3:bf:04:
                    8d:9e:aa:0d:ff:f9:92:dc:64:6c:39:17:ec:ce:c0:
                    b3:ea:29:8f:07:97:65:23:80:e7:8e:a9:bd:48:66:
                    7e:a4:13:9f:71:f3:e0:2d:5a:73:c4:95:4e:8e:4c:
                    e8:11:40:35:a0:e1:b7:a5:80:bf:27:6c:21:a9:d2:
                    a0:a1:2d:80:3a:63:b2:c9:46:f7:a2:79:83:cc:41:
                    b3:64:4e:84:b4:60:21:a1:59:1e:db:38:a8:28:d1:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:39:87:76:A5:66:81:B3:2E:82:97:1B:D4:8C:67:22:D7:14:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191ce3e3-bf73-3445-871c-6b5c69450e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:91:a2:fb:c0:10:61:09:59:66:4a:6a:5d:7f:dc:d8:9c:
         4f:5b:08:34:14:a9:2c:32:6d:75:e3:e9:9f:9d:98:b0:63:1c:
         72:0f:cf:e0:0c:8d:27:51:4c:f4:30:ef:08:23:1e:94:dc:ac:
         3c:68:96:02:f7:e7:ae:30:f1:7d:ba:c1:31:ea:19:09:ee:6b:
         ab:c5:0f:27:5d:1d:c1:c4:dd:2d:c3:4c:89:a3:fe:db:48:c5:
         2a:a9:a5:cb:a5:64:9b:39:3c:d1:92:60:38:f0:ed:e0:ae:87:
         46:70:d4:0c:da:f1:84:63:78:8f:dd:5c:89:cc:5d:28:75:d0:
         af:e0:a4:45:2f:8d:15:69:14:98:b3:c4:ff:a7:f0:86:3c:ac:
         0c:0f:d0:a3:45:14:41:af:b6:12:60:b6:05:9c:ef:6d:c5:65:
         c2:87:85:95:19:9e:3c:f6:41:2b:f0:31:79:75:97:9c:76:3f:
         4c:0b:8a:99:6e:f5:05:19:b9:2a:c1:82:25:3c:d5:2c:12:7e:
         99:01:87:3c:7e:36:c2:03:9c:41:3d:02:01:bc:1b:15:9d:fa:
         61:7c:b6:6f:05:5e:26:81:e9:b3:bb:25:fe:55:25:11:9f:3f:
         e4:31:d8:5f:0b:d9:dc:4e:3c:3d:e8:3d:b3:a1:d6:88:31:4e:
         bc:cd:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:10:35 2026 by rpki-client