Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa
File:                     6ca14795-c9d7-312d-8e48-78aaeca59e94.roa (raw, json)
Hash identifier:          M4Wc3MxAkPYpBRlcbeai2WpakcaRYBY6ecbmyiT8jOY=
Subject key identifier:   4B:91:C3:C2:3E:E1:40:88:B2:A6:90:42:70:B1:F1:7B:35:0F:7C:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F2531F48B0573C8191720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396592
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:25:31:f4:8b:05:73:c8:19:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=32b7ccac-659f-4703-887f-ced1e3bb8f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:42:27:5f:97:f0:45:4c:6c:37:cb:de:89:
                    3b:ad:e1:04:5f:aa:65:7b:33:82:5b:00:9a:b1:79:
                    21:98:7a:06:e2:81:50:5d:c1:d3:7e:69:19:30:27:
                    a2:cb:e3:ec:ce:ff:ab:35:67:eb:6a:e7:b5:4a:9f:
                    ec:e9:08:2a:1a:cc:b6:4e:95:82:f3:b4:f4:50:b6:
                    c8:ca:a5:55:19:75:5a:37:f2:85:31:a7:4e:9b:6e:
                    b0:26:f2:e7:c6:77:db:d5:40:29:34:06:e0:78:2e:
                    91:d9:80:70:2c:47:7a:67:33:0d:4e:34:df:51:70:
                    25:b6:b0:82:bc:74:9c:f5:65:51:1a:d9:62:50:3e:
                    31:34:61:b8:88:71:fe:1c:a9:e5:70:5e:eb:8c:41:
                    75:fe:45:74:83:de:7d:0f:cc:9b:b0:58:4c:7d:39:
                    fa:d4:cb:f7:35:ad:a2:7d:db:48:37:ca:fb:cd:36:
                    66:8c:97:5d:f2:2a:63:16:53:97:50:82:53:47:4d:
                    5c:f1:b8:03:91:35:a5:24:b4:78:81:31:85:27:c6:
                    6f:63:37:b6:13:9d:59:96:f8:1a:58:7f:f3:04:1c:
                    13:05:d1:a5:a3:7d:50:c0:f9:2e:17:d0:33:d1:3f:
                    53:fa:22:74:0a:bf:71:d4:c1:57:94:37:a5:e2:4d:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:C3:C2:3E:E1:40:88:B2:A6:90:42:70:B1:F1:7B:35:0F:7C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:9d:0b:66:c3:df:c6:c1:f3:9b:f3:70:55:90:fb:a6:85:b3:
         8a:4c:fc:f8:d3:8a:35:fa:1b:35:c0:77:1b:06:79:17:8c:08:
         ea:97:ec:55:38:ab:5d:33:f8:cc:52:90:22:9a:3b:05:66:04:
         df:6e:47:e1:96:d6:b9:8f:d8:97:31:24:38:4c:e0:ec:fd:0d:
         bb:99:f1:9f:66:92:33:d9:6f:f9:1b:51:8b:d2:24:1a:b8:b4:
         9e:2a:70:fb:e6:cb:48:cd:e8:78:09:50:fc:16:88:41:7c:97:
         93:da:05:df:ab:5d:72:75:5c:3f:16:98:7f:a6:05:44:04:67:
         94:e1:ac:8f:54:bc:a3:80:7b:04:f0:c1:b8:6e:4e:fc:9b:de:
         69:1a:00:67:78:27:e7:f7:93:6a:51:1b:9f:fd:29:5a:30:90:
         53:35:67:28:b5:c3:31:ec:69:ee:f2:92:e7:23:9f:68:af:8a:
         b7:cc:6d:90:0a:2f:a7:1e:a5:19:93:d1:08:ae:be:8e:37:de:
         61:ed:4f:aa:f4:c1:cf:ed:52:ee:1e:6e:cb:73:62:d5:c0:0c:
         a8:29:0f:02:58:99:69:76:15:75:26:9d:ed:3b:07:5a:47:13:
         4e:52:30:bb:15:2d:ae:f6:ad:76:c3:ab:3c:bb:e8:57:7b:2e:
         d9:89:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:41 2026 by rpki-client