Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa
File:                     bbfcb385-8039-3bd7-af63-73b04b4a419a.roa (raw, json)
Hash identifier:          tz4J0Z8lDOJDonHXmcy6Dh1dCGKFjgwokRkIQAeV+sI=
Subject key identifier:   B6:3A:FE:03:A8:00:70:85:D4:FC:2A:CD:CE:43:C0:41:80:8B:DE:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0DFD87B863E111C62C400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397198
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:df:d8:7b:86:3e:11:1c:62:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d80b65b7-e821-4e3b-a188-e31169f53b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:30:55:66:25:97:7a:72:c9:d2:7e:6b:6b:
                    81:05:28:c2:37:b5:e6:3a:df:2d:69:b1:bc:9d:71:
                    32:00:36:29:b7:28:c2:6f:e7:8f:81:85:0a:56:1a:
                    8a:76:d7:7b:50:fe:49:4c:3d:df:f0:1d:a4:01:0b:
                    64:22:7b:72:fd:8d:b0:a5:f7:46:a7:fa:51:1c:55:
                    b3:3b:8f:c5:d1:9a:50:55:fd:d7:68:9c:79:7f:9c:
                    c7:4a:bc:58:ed:86:bb:f3:cd:0e:e6:31:3b:f5:5d:
                    e2:88:52:00:93:a0:7d:9a:d6:55:e7:72:9b:55:27:
                    24:09:09:f0:43:1d:d4:7d:ac:e9:8d:af:42:9f:24:
                    fe:bd:43:72:8c:b0:84:7b:0b:3d:fb:81:05:87:b1:
                    bb:3b:36:01:90:5c:b4:cd:77:0f:56:f1:69:13:c2:
                    32:fe:e5:ee:0c:ad:be:74:a6:53:6b:31:ff:32:4a:
                    52:0f:11:55:97:fe:29:22:ca:57:be:05:fd:43:f8:
                    8b:5e:72:ca:fe:47:4d:fb:8e:50:54:2b:2c:af:2e:
                    fb:37:63:cf:c2:51:f6:5a:ca:31:4f:69:5d:b8:05:
                    71:ed:df:94:ba:56:fb:3c:57:73:8b:7a:1b:ff:7c:
                    ff:3f:6d:b1:a2:7b:49:37:1a:a2:38:b4:d9:68:70:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:FE:03:A8:00:70:85:D4:FC:2A:CD:CE:43:C0:41:80:8B:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:e3:aa:8a:ad:5d:05:93:d1:44:86:74:e5:16:1f:87:ce:
         23:0f:41:33:e5:3a:70:7f:8f:d7:4c:58:d4:58:bd:ae:58:89:
         57:32:e2:21:93:b4:fc:fc:90:6f:1a:81:d6:ae:4a:67:65:f0:
         27:34:89:4a:37:62:d9:20:e6:d5:01:2f:eb:55:46:ba:c0:a6:
         69:55:a7:26:8d:64:5b:48:fd:84:83:92:c6:41:b6:b7:f7:41:
         62:cc:69:bb:8d:31:c4:14:8a:6b:22:45:66:3e:7a:de:4b:a0:
         21:39:33:91:4a:40:17:bb:c2:16:67:33:3e:62:ec:b2:af:9b:
         67:e6:ac:f1:36:6b:dd:9d:0e:e7:7b:23:c1:34:56:59:a3:30:
         1c:94:88:9d:b4:3f:62:97:e1:e0:8c:55:a0:cb:d2:92:bd:5d:
         a6:ba:f5:e5:88:10:3d:ec:8b:45:7e:29:2a:e5:54:56:a3:1b:
         18:d5:6c:44:ca:04:5b:b7:e1:aa:e0:3d:0e:1f:05:ef:b3:56:
         01:02:29:2c:40:06:43:cc:c3:26:19:2b:f9:d5:b1:80:82:41:
         24:ae:c5:99:55:21:fc:c2:77:bd:5c:c4:20:b6:7e:45:8e:13:
         04:ec:01:9e:e5:40:ab:00:01:0d:31:35:5b:d2:b2:fd:06:7e:
         09:27:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:43 2026 by rpki-client