Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fbcd529-f0d2-3046-a3b2-bd9d152bd8cb.roa
File:                     3fbcd529-f0d2-3046-a3b2-bd9d152bd8cb.roa (raw, json)
Hash identifier:          4uiqYjDgp+0uJOCWe/mqR2Zk4KlY8tnVwkr3QFwRNv0=
Subject key identifier:   21:03:96:20:A9:59:B2:A9:CA:CD:4E:E4:44:7A:2D:50:25:CB:41:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9F2E6C2DD2CBE880A2D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fbcd529-f0d2-3046-a3b2-bd9d152bd8cb.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396616
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f2:e6:c2:dd:2c:be:88:0a:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=587cd476-b91d-4129-a34b-2d2650ddb410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:5d:0b:cd:97:7f:a8:ea:53:db:66:00:16:
                    f2:33:21:12:1d:49:d2:4f:f6:e6:30:11:c3:ee:f1:
                    03:5c:d6:44:ed:c9:54:85:4f:b0:78:75:e9:7b:73:
                    3d:cd:5e:40:fd:88:79:b3:6b:03:9f:42:fe:c0:54:
                    d8:cb:4d:f4:18:7d:4e:de:21:96:fe:d7:c8:73:6b:
                    1d:83:cb:b9:8b:3c:e3:0c:7c:11:d5:80:72:e6:48:
                    f3:75:ac:90:f2:00:43:0a:9a:fb:eb:57:31:c0:c0:
                    f1:f1:a1:4f:a2:ba:31:cd:c4:f2:86:b3:43:eb:7a:
                    94:ee:30:3a:8d:ab:43:c0:bb:26:73:2e:ea:db:72:
                    e4:2a:1d:7d:ef:96:15:8e:95:83:71:48:7e:1b:d7:
                    ca:d0:1c:55:6c:9c:be:ff:e3:b8:93:f5:36:cc:0b:
                    e0:05:8a:b7:e9:9c:15:b4:ac:89:cf:55:6c:0b:86:
                    29:52:71:5c:b5:3a:69:5a:05:84:93:81:0b:59:22:
                    dd:1d:7b:2f:61:01:e9:a5:1c:d8:c9:8e:7d:66:7e:
                    e6:8a:6d:f9:f8:b1:74:b6:6a:65:af:7d:8f:6c:8c:
                    e1:29:f4:b0:4a:1a:6a:9f:49:d4:ec:75:1f:98:87:
                    c8:7e:e4:4d:5a:04:97:d1:82:db:15:17:e5:00:0f:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:03:96:20:A9:59:B2:A9:CA:CD:4E:E4:44:7A:2D:50:25:CB:41:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fbcd529-f0d2-3046-a3b2-bd9d152bd8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:f6:68:78:6c:51:38:d5:e8:41:13:d2:c4:9f:20:fa:53:
         ef:db:9f:6b:91:05:d2:a8:9b:65:8d:82:9e:43:ce:68:29:0b:
         99:ac:5c:ed:2c:0d:fb:d5:ec:0e:c2:b6:76:34:f6:d1:51:6d:
         65:90:b4:df:79:95:b3:5d:3f:3d:80:ea:46:f9:7d:a6:46:cf:
         a2:f1:d9:c0:47:25:9b:72:8f:95:ad:2b:68:a8:e4:fa:23:c3:
         fc:e8:f5:bc:89:8d:d0:cb:e0:88:38:4e:83:85:e0:94:0c:ce:
         ee:11:49:af:f6:28:23:a0:db:6e:31:8c:f6:27:19:52:20:c2:
         c3:b5:4e:b8:8a:5f:3a:0a:79:2f:37:14:5d:cf:06:2f:7c:ac:
         f6:98:0a:13:0f:a3:b4:7d:a0:98:e1:fd:c1:6c:ae:cd:ce:01:
         68:06:de:59:50:75:13:4f:d1:7e:70:59:b5:2a:8d:60:ae:d2:
         14:01:87:79:53:71:2b:64:a4:92:d3:6f:3d:23:15:83:b7:d6:
         9d:f8:f2:9c:14:31:4f:82:0d:7f:b5:98:e1:c2:d1:f9:3b:32:
         7d:cb:f8:b7:3b:c8:89:70:ef:f3:68:c7:d8:ca:a0:47:b4:62:
         d0:5b:01:60:7e:c6:96:e6:fa:b2:4a:c7:23:65:ad:1b:f4:92:
         8c:9e:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:35:02 2026 by rpki-client