Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa
File:                     05870cd4-736c-3480-ae35-44660e7730a2.roa (raw, json)
Hash identifier:          kotToUBAe9bvNmkplN4MQyRMN6wFHN1kYlC2sOK+Q8Q=
Subject key identifier:   1E:55:20:FF:B1:18:58:FF:B0:6F:FD:3F:ED:1F:06:95:88:D1:AE:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869BAE42585F1D6C9F4080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36616
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:9b:ae:42:58:5f:1d:6c:9f:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2e5823f7-d26c-4200-b354-7e8397f2d989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:cb:17:d1:c1:c3:15:39:05:c8:8e:27:2f:
                    13:67:63:12:65:01:9f:11:3f:f3:b2:6f:d7:f9:c1:
                    1e:04:31:89:9c:43:94:71:bb:57:fb:18:1c:cd:7c:
                    ea:90:bb:7a:81:70:7e:05:29:cb:fd:51:82:74:bb:
                    7b:89:cb:28:ed:25:8e:53:40:32:5d:c0:40:41:69:
                    e5:29:8b:d7:33:69:fe:5e:19:fb:f4:11:05:6b:97:
                    f7:04:63:90:22:09:16:d8:bb:aa:99:a4:76:fb:9b:
                    a6:d1:87:4c:20:90:a3:f8:0e:12:97:f6:a5:49:07:
                    ed:f9:55:66:00:bb:fd:f0:84:af:b9:d8:f5:00:b6:
                    c6:b4:9f:95:42:80:b3:e1:4b:77:72:41:81:0f:a7:
                    ca:e3:ce:7c:a4:cf:59:64:8f:04:e4:87:b1:28:77:
                    02:19:3e:09:d1:82:58:4f:ab:d1:b0:6b:5a:31:76:
                    b5:cd:c8:ec:42:a6:c1:b0:ac:7b:74:43:37:05:8d:
                    20:c2:1c:d5:62:c0:6d:02:42:ac:e2:09:78:48:fc:
                    85:9c:0b:23:7c:5a:6b:5a:05:25:42:02:15:6a:18:
                    79:bd:2e:08:73:4e:de:d7:42:8f:5b:c3:95:f8:19:
                    6d:23:84:d8:82:4a:78:d7:54:4e:fd:9c:53:e3:be:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:55:20:FF:B1:18:58:FF:B0:6F:FD:3F:ED:1F:06:95:88:D1:AE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05870cd4-736c-3480-ae35-44660e7730a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:48:4f:eb:65:34:74:58:c7:12:68:7e:a6:03:b2:81:96:
         7b:27:8f:be:bb:fd:10:6a:14:12:4e:c1:1f:f6:9b:b5:ac:29:
         f4:51:b0:4e:35:02:06:2d:5d:d3:00:57:82:4a:68:b8:07:67:
         91:85:b8:56:e1:13:55:52:5f:14:6a:38:e4:f6:da:b8:fa:7d:
         db:b0:f7:10:bb:63:94:d4:c9:6d:2e:1b:18:f4:04:ec:1d:12:
         36:20:44:03:69:a3:12:b1:a6:88:68:ce:b5:bc:f4:1f:95:22:
         13:12:35:1f:6b:ec:f0:37:56:44:ab:aa:79:5a:dd:92:31:c1:
         f1:c0:22:1a:15:2c:13:f0:93:4a:2c:c2:ca:ec:47:0f:6f:9d:
         75:80:a8:1c:4b:53:b3:f0:c3:1f:6e:a1:7e:1a:cc:0c:8d:66:
         ba:54:e6:63:da:37:e7:98:5e:c0:0f:fb:97:7e:c4:e5:8e:0c:
         2f:e1:65:5d:c2:fa:cd:72:0c:d0:72:63:22:e9:68:f0:20:d5:
         7d:a0:c8:f5:48:44:34:0a:d5:30:08:0f:71:cf:09:95:47:05:
         e7:59:c2:51:c9:a6:93:c7:97:67:c8:b3:e6:57:29:8f:96:f0:
         35:c4:f6:a6:95:c6:09:7d:9e:5a:0e:a6:8c:cd:73:c6:8e:0d:
         85:e7:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:23 2026 by rpki-client