Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa
File:                     6b05d6f6-cdbb-3145-9108-50c4624b178b.roa (raw, json)
Hash identifier:          3dXZfrTGdQ8jlkQMVGOtIB2sbu2YKpC2vNIk2xG1xOE=
Subject key identifier:   DA:9F:E3:AC:EB:D4:B8:18:C4:B1:F9:FE:38:0D:A8:90:84:F1:DF:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986BF9CA64B5524D9AEB680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:bf:9c:a6:4b:55:24:d9:ae:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=29585087-1bc7-4bbc-ab7d-63539b21d117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:a2:c3:1c:3e:64:a0:b8:fa:c2:07:4b:90:
                    74:bd:4e:4d:8d:42:93:b9:c2:f0:39:04:a2:81:8a:
                    6b:26:ec:e9:25:3a:cb:e9:e6:51:a5:af:35:48:df:
                    11:1b:32:30:c6:3c:8f:13:e1:c1:52:11:b6:b5:a7:
                    19:29:2b:79:78:44:af:26:ea:04:7b:b5:cb:7c:f4:
                    f4:b1:25:57:23:84:ba:df:1e:fe:0a:46:30:6d:66:
                    0e:92:96:c3:e3:20:c9:5b:a1:51:de:62:cb:9f:6e:
                    68:e1:1e:15:37:dc:f3:8e:d5:c1:34:5a:04:e7:f8:
                    aa:04:13:50:ee:2a:09:1d:bb:10:e4:f3:e3:de:ed:
                    b7:15:92:bb:a3:a0:2d:7f:2f:4f:56:ea:dc:32:6f:
                    44:bf:17:6e:cf:5e:82:fd:8b:e3:dd:b1:e9:9b:f5:
                    b7:4f:85:93:0d:60:b2:d5:01:4a:95:1e:ae:17:6c:
                    d1:0b:c9:ec:fb:85:32:6f:a3:6a:52:c4:f5:9b:86:
                    29:af:25:92:35:63:44:9c:92:6f:a0:9d:f7:b6:bd:
                    ce:07:cb:9a:16:a2:f7:f0:63:71:ef:ca:c0:e8:b1:
                    e0:50:8a:90:b8:d3:5b:b8:e9:f9:aa:76:2d:8c:d9:
                    cc:a4:2e:e2:31:31:09:4f:c9:6d:25:2b:42:2f:7c:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:E3:AC:EB:D4:B8:18:C4:B1:F9:FE:38:0D:A8:90:84:F1:DF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:2d:96:42:2e:02:31:b5:8e:a1:45:73:e4:57:4a:ed:6e:
         63:c9:98:40:b9:29:ea:e4:04:78:15:c7:f1:9d:af:64:78:8f:
         ac:fb:b5:05:d1:9b:18:6c:d3:87:32:f6:c7:16:d5:aa:09:fb:
         72:46:ca:83:b0:8f:4c:92:b9:30:9d:00:0e:9d:1b:e3:44:82:
         62:9b:61:33:d0:1c:62:59:1c:1e:3e:90:2a:22:3f:aa:72:6e:
         75:2d:86:75:82:44:92:f4:30:ab:52:07:e0:18:f0:d4:03:86:
         32:9c:00:d0:d0:1e:fe:6f:74:fb:a6:91:42:e6:0e:1a:cb:83:
         33:28:4c:96:f9:a5:c9:31:eb:02:59:03:29:7c:13:b0:48:a0:
         03:69:6d:ff:35:2c:6a:c6:d6:39:ae:49:f0:1e:0e:36:1a:5b:
         2f:03:24:c3:54:45:7e:76:b0:28:b2:3f:29:8b:bd:dc:3d:08:
         8a:f3:3f:c5:29:3c:d1:12:b3:48:34:28:1a:4b:31:93:e4:5e:
         33:45:ff:17:76:0b:cf:c6:70:22:70:85:34:3a:55:d2:aa:2d:
         ae:94:d0:b2:83:7d:91:c7:e7:11:85:57:eb:ba:5c:b1:73:8b:
         1a:13:e1:8e:86:64:fb:4a:c5:40:34:7e:0d:a4:e6:a5:e4:59:
         06:75:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:16 2026 by rpki-client