Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa
File:                     13195778-fe50-30a6-a003-dd4cb897d180.roa (raw, json)
Hash identifier:          GekamlO/6FjZWbIZba8mBHZ+hSljHN+eVHky10CJTxQ=
Subject key identifier:   ED:24:74:22:EA:73:F4:0E:B1:FE:21:7D:9E:78:A5:54:CC:D1:A4:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3E5F5409D8434D8BA579FB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     396613
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:54:09:d8:43:4d:8b:a5:79:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=61aa31a7-b28d-44fe-96d7-64eb4e9684ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:e1:11:bd:7b:bd:f3:52:91:02:e7:57:8a:
                    93:af:fc:0d:e2:60:7f:34:a4:00:dd:29:1b:91:0c:
                    56:b6:0d:27:55:9b:2b:47:04:4c:44:a3:d2:c9:83:
                    0b:6d:50:f4:ec:4f:95:09:9c:9c:85:46:31:32:4b:
                    1e:d6:2b:21:73:da:2a:a9:47:65:dc:4f:d5:6c:a8:
                    18:53:83:6b:1f:91:ef:a8:1b:f6:bc:33:e2:9e:2f:
                    ae:be:e3:65:8b:08:3f:26:4e:fe:8b:b6:2c:1c:b2:
                    8e:f8:4a:16:ac:af:fc:d1:08:78:e9:08:63:18:e7:
                    f2:3d:87:98:d5:ba:0f:5b:07:c0:98:da:f0:69:f7:
                    46:81:3a:40:be:3c:80:ef:c3:7b:07:44:0b:0c:bd:
                    c3:7b:a1:bc:14:00:6b:8e:b6:54:30:91:29:c2:da:
                    6f:29:31:1c:4a:62:d6:ad:18:56:ea:df:32:dd:95:
                    ed:34:c9:ba:48:7e:72:b0:df:33:b1:e5:98:3d:8f:
                    58:57:0c:bf:cf:4c:bb:5e:9b:51:ed:91:7b:99:60:
                    1d:6b:b4:55:51:f5:dc:20:b0:da:82:e2:0a:31:c1:
                    73:5f:e0:d3:1d:47:6a:df:fe:d7:86:11:14:21:7d:
                    fa:84:91:95:14:4c:aa:8f:a2:40:fe:79:e7:4c:cd:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:74:22:EA:73:F4:0E:B1:FE:21:7D:9E:78:A5:54:CC:D1:A4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:b2:3a:f4:24:eb:98:16:ef:02:87:86:fc:b6:3f:ee:c9:
         87:4d:2f:1f:99:45:df:07:92:e5:48:54:d9:e1:33:fe:1b:db:
         1d:b6:40:16:bc:a7:7f:16:ff:2d:9e:2c:d6:87:82:42:52:b1:
         44:6a:3c:20:7a:cc:10:b6:c3:be:5e:e7:54:33:0b:1b:3f:12:
         c7:02:47:66:aa:0c:4a:e0:9c:85:12:9f:6a:f6:f5:c1:47:68:
         64:ad:a4:f4:d0:15:e4:14:db:b2:fe:c1:95:71:c0:4f:23:94:
         86:2d:cc:04:78:aa:79:f4:38:b6:1c:0c:f7:2e:c6:2b:af:8c:
         0b:d3:b1:ee:e4:3d:ea:6f:74:13:29:ff:f7:3b:3a:48:fa:17:
         60:52:69:75:a3:fc:d3:14:ae:ab:23:ef:e7:48:df:10:35:3e:
         b6:ef:66:47:f2:fc:17:a4:0a:d1:d8:8a:41:d5:51:d8:73:c3:
         62:07:ba:d2:a5:29:f2:8d:40:15:b1:16:ac:37:21:84:ee:56:
         e5:b0:b3:93:85:6e:69:9f:c2:01:1e:6f:63:20:bd:13:88:f3:
         4f:3e:2a:99:c3:a4:6d:04:1f:dd:d0:9c:6a:26:10:df:fe:3c:
         ab:a5:c1:cb:84:eb:ff:18:56:ae:62:e7:ce:fb:88:19:5b:85:
         95:ba:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:43:22 2026 by rpki-client