Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4478a0ed-d88b-31b6-b6a2-c3e1f55ee00d.roa
File:                     4478a0ed-d88b-31b6-b6a2-c3e1f55ee00d.roa (raw, json)
Hash identifier:          5j36qj6N5S0qYVO0zhOIiUNi9f7lYAgKbiHDaS5K3JQ=
Subject key identifier:   96:0B:88:FD:C8:33:EA:C5:C3:85:5F:1C:CE:81:C1:3E:50:49:96:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9F33703C8B94E414D7D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4478a0ed-d88b-31b6-b6a2-c3e1f55ee00d.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396573
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f3:37:03:c8:b9:4e:41:4d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=d33da894-207d-4551-8e03-0f2401eb264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:8b:1b:68:c8:7f:f9:0c:e4:ae:0d:57:43:
                    3a:1d:ba:0d:58:fc:2c:6c:3f:70:25:0f:2b:25:4b:
                    c0:e8:7a:1b:2f:e4:d3:b9:cd:58:ab:cb:90:bc:e8:
                    e6:a3:13:a0:ee:10:09:88:21:31:72:a8:d7:34:27:
                    0e:51:e3:09:a4:17:cb:80:3e:66:3a:fc:c1:7f:c0:
                    6b:55:80:0d:f3:80:28:5e:98:02:2c:bb:24:af:2f:
                    4b:e9:1e:19:f6:ac:1d:c3:31:be:69:f0:37:88:da:
                    09:77:75:dd:db:1a:53:87:69:fb:22:78:e3:cf:1f:
                    50:89:83:55:4e:2a:b1:30:5b:c7:a9:ce:5a:ea:08:
                    65:a9:c6:68:97:73:64:0c:91:2a:e9:14:b5:d4:18:
                    54:8a:8f:9b:0e:61:6b:ed:d4:61:f5:75:97:81:fe:
                    00:b7:39:ae:82:b6:6c:2b:77:e6:76:65:34:3b:a3:
                    0b:64:aa:30:95:aa:71:57:69:a5:fc:3e:1c:e8:ac:
                    d6:d4:d6:69:4c:39:99:f1:a7:0a:cf:41:89:9b:24:
                    37:4f:52:0e:77:74:09:b1:3c:4f:d3:5d:cf:d8:2b:
                    4b:8f:e3:c9:54:e6:70:ba:e6:25:95:7f:13:5a:28:
                    8f:50:fc:e7:0c:32:82:39:bc:6b:90:25:e5:38:b1:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:88:FD:C8:33:EA:C5:C3:85:5F:1C:CE:81:C1:3E:50:49:96:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4478a0ed-d88b-31b6-b6a2-c3e1f55ee00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:3d:88:47:7a:7e:fe:12:c0:bb:cf:81:6c:24:f6:a5:05:
         4d:ab:81:73:3f:61:10:00:5c:87:c4:f1:fa:dc:bb:32:7a:c5:
         4d:31:38:fe:98:67:7d:e3:d8:20:54:12:a5:d5:9c:22:3f:cc:
         bc:00:e0:c9:16:fe:b1:f4:f5:90:7e:1f:48:8b:e6:6a:0e:62:
         37:f2:a3:77:d2:99:25:66:eb:84:b2:64:83:2c:68:49:15:e5:
         25:a2:a2:f4:dc:02:b3:d5:f3:37:b8:1a:d6:6c:a2:ff:56:0c:
         6e:4d:08:27:ca:66:4f:b5:a3:db:c0:c9:64:22:c1:c9:3c:b4:
         fe:a5:0e:7d:08:b5:df:df:a0:bb:71:ec:f7:56:83:c0:06:dd:
         21:e5:be:82:4e:21:2b:86:74:f0:c2:d4:d5:35:e0:4a:3c:1f:
         52:17:83:da:2b:d1:19:d5:8d:16:ea:8e:ef:51:4a:7e:7d:1b:
         dd:ce:66:a3:fc:e5:91:ac:08:9e:e5:bd:49:4d:39:31:1b:ff:
         e7:2c:4c:78:5d:d6:ae:e3:52:5a:61:c3:fb:b3:03:9b:90:4c:
         d4:46:b1:23:44:69:b3:c2:bb:ce:c5:29:31:32:63:bf:d7:97:
         d1:2d:be:68:30:bf:8b:e2:91:3a:42:7f:67:c2:1c:c2:33:3a:
         48:8f:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:52:26 2026 by rpki-client