Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa
File:                     61470e17-1989-38af-9f67-dd9fde729d0e.roa (raw, json)
Hash identifier:          EnS89h+Lo0pUN9ZHcD1aSPmMh4kiHhToThTI+qk5W2Q=
Subject key identifier:   93:00:A8:06:86:45:C5:1E:25:32:E0:6F:40:19:D8:D2:BD:E1:DB:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F768FA48A70372CA74BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     397199
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:76:8f:a4:8a:70:37:2c:a7:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=23261b3a-a372-43ea-9043-7b4e0f8078ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:f2:fd:34:40:f4:8f:d3:03:b6:11:8b:62:
                    a9:ec:25:c8:12:94:3e:aa:45:6d:65:39:d1:cb:e9:
                    34:03:af:3e:79:f8:40:64:60:c8:4e:b5:a0:1c:0d:
                    6c:bd:11:31:37:04:f0:50:21:19:9a:a2:60:c8:ad:
                    dc:2f:9f:ff:13:db:9f:90:e3:3c:f4:52:e6:38:fa:
                    9d:47:bc:f6:fa:c0:1f:51:70:37:4e:90:eb:dd:5d:
                    46:f9:8b:62:c4:01:30:85:2c:14:b9:54:6f:ab:cb:
                    00:74:20:00:5e:ec:c2:34:6c:80:6c:fa:22:d1:54:
                    ab:42:3d:59:40:90:fc:b8:45:65:a4:af:be:db:1a:
                    9d:c0:9b:92:64:f5:ae:a2:a6:5e:d1:74:d0:9a:58:
                    43:18:63:4e:aa:c9:83:97:5e:12:6f:62:9d:65:9e:
                    1e:cd:02:91:49:04:60:83:c8:35:a3:fc:f7:12:dd:
                    8d:26:73:e1:8e:03:4a:70:63:ed:ca:26:54:ed:ea:
                    7e:68:8d:de:7c:52:ed:36:63:a9:57:1e:5c:30:a2:
                    92:9b:00:3c:ea:e3:5b:ee:b3:f9:fd:c1:51:dc:b6:
                    bf:5f:a3:ca:f8:a7:76:ff:0a:49:18:af:40:b4:6c:
                    52:bc:c9:5b:70:d6:d2:1e:37:e8:13:d5:08:16:10:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:A8:06:86:45:C5:1E:25:32:E0:6F:40:19:D8:D2:BD:E1:DB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:63:a4:99:3e:81:16:c7:9d:39:6f:0a:84:2e:10:e6:6c:df:
         67:32:2b:a8:08:b3:9a:1f:ba:4b:61:a6:b7:a6:86:3a:68:ec:
         ce:6e:bd:ca:44:94:1e:d0:3f:e9:58:7b:82:03:46:65:6e:96:
         01:6b:cc:51:44:dc:32:23:59:3a:8a:3e:3f:08:f4:11:01:c7:
         b4:50:91:de:fe:5f:98:22:4e:cc:1d:5c:57:a6:5e:13:15:2b:
         18:5c:41:f1:30:5f:3e:b4:27:76:5b:7c:dd:9a:35:e3:42:91:
         60:df:b5:f3:17:77:4f:ce:b0:76:8c:18:e9:38:d4:36:dc:ed:
         bd:cf:c6:e3:57:53:52:09:2d:b1:0c:bb:1a:ad:0e:71:9c:d5:
         66:ec:60:a6:65:56:9e:4b:f5:a1:59:d3:5b:4d:81:0b:ce:fd:
         27:2d:b8:5b:de:f3:95:48:d2:4e:3e:0d:48:4d:c0:53:2f:f5:
         84:b8:20:4b:fb:93:10:b2:c5:68:20:f4:fd:8e:9d:14:7c:9c:
         91:b0:b2:f3:3a:c1:9d:83:d6:67:89:48:b5:be:5e:c2:ed:5d:
         57:47:cd:83:72:d5:ae:42:94:58:ca:a9:41:25:72:fd:22:b0:
         07:7d:10:a4:9f:ec:64:0f:9f:f5:9f:62:80:ff:67:60:f6:21:
         88:07:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:56:42 2026 by rpki-client