Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa
File:                     b9001f23-1985-332d-89db-692bdc60fc6a.roa (raw, json)
Hash identifier:          XPN8qcT6+uw1+hTxWKE89S5wNB0RjN1tDWryzi9UJEg=
Subject key identifier:   D0:A4:F5:00:43:F8:11:B6:66:01:A0:B8:E4:BC:AA:C6:C9:F6:F6:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC9B4010839DEC1EEE1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19836
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c9:b4:01:08:39:de:c1:ee:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1dc5e303-6686-4fe8-84f1-c70a9ac19489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:a7:3e:48:fd:26:6d:d7:46:5d:15:9c:2a:
                    55:32:5b:1f:3b:b8:a5:71:09:f1:9f:aa:83:06:7a:
                    17:2c:4d:6e:24:94:8d:17:2c:b4:f7:bb:78:34:23:
                    4d:38:0e:5f:e3:3e:5e:1e:6c:bb:a2:bb:fd:8f:d4:
                    b2:65:53:3b:7f:fd:dd:93:80:51:d2:49:c9:c7:ed:
                    1f:6e:21:3e:68:3c:10:42:8e:e2:63:84:af:0e:89:
                    a4:4c:5b:5e:fc:c2:d9:18:e8:34:57:97:83:92:e2:
                    44:c3:b6:ea:fd:c9:42:dc:9a:a7:da:2d:4c:41:40:
                    55:5e:ce:dc:b8:a0:92:44:03:18:ac:21:fc:67:37:
                    17:02:a8:ab:94:60:3a:c6:bf:06:c0:47:56:82:86:
                    8f:cc:52:cd:00:62:3b:3e:5b:a5:a3:18:0c:3c:fb:
                    83:8e:c3:3d:6c:28:30:f9:e8:87:23:7b:0b:b5:34:
                    9a:2a:16:f0:54:e3:29:b5:2f:34:54:bd:9f:a8:42:
                    c6:d6:9d:b6:68:bf:4f:e7:b6:c6:5d:20:58:87:4d:
                    44:e1:86:a9:61:13:61:cd:83:49:2e:e4:de:1c:03:
                    3b:44:26:e5:17:c0:07:3d:85:4a:e2:3d:44:64:cd:
                    dc:c9:9a:24:3b:6c:e2:18:d7:74:68:65:a6:8a:e5:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:F5:00:43:F8:11:B6:66:01:A0:B8:E4:BC:AA:C6:C9:F6:F6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:9a:0a:bf:e5:f7:61:7d:cf:19:ce:a0:09:e5:c3:09:c2:
         96:34:a3:6d:09:65:0a:ce:7b:ac:2e:95:9b:8b:c4:47:2e:f7:
         51:90:e1:30:50:ad:ae:d0:e0:8d:4f:8d:8b:08:2e:b7:af:80:
         1c:f8:21:6f:e4:ee:18:0b:1c:5d:ba:e9:18:1e:aa:c9:fe:10:
         ea:98:86:b7:b0:a9:f0:cd:c7:5c:56:a0:27:8d:8a:c9:61:48:
         63:73:58:88:cc:91:d9:d2:17:00:d0:b7:b4:81:45:41:cc:09:
         fe:ae:33:8a:14:9c:46:32:7d:53:b0:b6:80:93:a7:a8:4d:a7:
         86:7a:e8:dd:3b:06:fd:45:9e:56:c9:ac:fe:79:1a:05:61:45:
         d8:5d:4b:8b:0e:d5:17:69:fe:58:7c:8c:52:33:e8:dc:75:7b:
         8b:28:06:be:2a:12:15:ce:34:fc:10:d1:6b:c3:46:bf:16:47:
         91:74:ec:b7:c1:50:47:e4:47:6c:d9:c9:bd:74:81:9f:c7:7c:
         95:87:b2:5a:03:88:2b:1b:13:15:75:ba:9e:8b:5e:51:ca:c0:
         bc:03:e2:ec:65:ef:2c:93:23:42:4f:ab:dc:b2:a6:98:7a:d0:
         10:33:09:10:74:ca:aa:06:9e:55:04:e4:f5:ea:68:0c:c5:36:
         44:af:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:32:31 2026 by rpki-client