Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af9d90-fb72-397d-8a39-9a75feeba314.roa
File:                     91af9d90-fb72-397d-8a39-9a75feeba314.roa (raw, json)
Hash identifier:          njykNeQosVab8cxQmkSQTV8GAlbZqbeeNBsqbhegEqg=
Subject key identifier:   5C:22:7B:D5:BC:80:0E:14:98:97:A1:FD:37:D5:59:E9:7E:35:E4:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E905DA5EE00870D9DA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af9d90-fb72-397d-8a39-9a75feeba314.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396547
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e9:05:da:5e:e0:08:70:d9:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=36e7dbf9-e0b5-47c9-865d-e5339a99aec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:bd:f2:df:91:98:56:2b:e0:56:bb:da:70:
                    26:8c:c0:10:f5:83:01:5b:fe:34:bd:a0:0b:2e:c6:
                    4b:04:48:2c:1a:f7:e5:7f:eb:4d:81:c6:8b:df:9d:
                    aa:4f:29:ff:92:88:22:1b:a9:f4:5b:1e:0e:77:31:
                    1f:a3:83:7f:d1:25:67:46:65:95:c2:f5:b9:eb:d8:
                    06:9f:8f:f2:e5:4e:81:7b:a3:d9:b2:8b:e0:2f:62:
                    42:55:fe:ce:93:c6:c5:4f:39:38:d3:f3:6a:64:ff:
                    cd:16:04:76:4c:1c:5f:11:82:70:22:0f:00:8e:39:
                    76:5a:de:72:3a:0f:13:6a:63:6a:c5:91:08:d2:d4:
                    18:18:f1:c7:63:1a:34:ac:75:1e:70:7b:83:e0:6f:
                    ff:78:2f:10:18:7c:fe:2d:da:bc:f7:2d:54:16:1b:
                    d9:81:d0:b5:30:73:65:0f:49:e8:72:9a:ef:25:3e:
                    1d:d0:15:84:97:a0:44:e2:ab:a7:84:91:cd:68:12:
                    9d:9e:a4:b2:5f:e1:2d:b8:0b:e5:13:24:9a:a3:51:
                    37:8d:94:70:23:e1:99:db:8c:77:67:73:91:59:33:
                    db:2c:8e:10:1c:af:39:6e:bd:ae:c8:c7:c0:d6:6c:
                    37:ef:41:49:1d:8e:da:f2:52:9a:08:7a:2e:12:61:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:7B:D5:BC:80:0E:14:98:97:A1:FD:37:D5:59:E9:7E:35:E4:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af9d90-fb72-397d-8a39-9a75feeba314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:f0:44:7e:4d:46:1c:31:c9:5e:8c:5b:90:a6:d5:e8:c4:
         16:eb:69:70:84:fd:30:c1:66:24:ff:3e:98:b6:14:95:28:00:
         22:de:7a:0a:3e:15:07:1a:39:60:15:68:74:05:ee:5d:86:f8:
         07:d9:5f:67:a9:8c:70:29:9b:1e:74:93:04:31:cf:83:46:13:
         c5:19:6e:d1:55:1b:ac:9d:e5:b9:3f:65:8b:5d:fe:c9:d7:69:
         8b:38:1b:e5:6b:2e:6b:9e:eb:bd:53:e0:04:bb:b9:d5:2a:14:
         88:58:6f:2a:59:da:f7:81:8a:e3:44:c2:06:26:6f:37:c2:2a:
         e5:45:08:15:17:36:68:67:20:62:1e:f1:60:7a:18:1a:3c:ba:
         47:ed:bb:9f:9b:48:23:23:71:24:10:6f:8d:c0:05:b2:a7:9d:
         83:38:10:ea:43:e3:d8:07:68:03:1e:65:75:0e:df:a2:0e:ca:
         5a:5d:5b:58:81:80:67:57:81:fd:91:0e:79:f8:d1:ee:64:a5:
         f5:2d:ef:e5:3c:d2:57:c6:c0:81:49:f8:3b:16:4b:68:36:88:
         ec:b9:90:11:15:ca:6b:b0:c6:46:b2:e4:f8:a2:c2:17:d9:1c:
         52:50:34:4c:89:07:73:0b:f4:f1:f4:97:1a:48:08:7d:a2:91:
         0e:10:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:51 2026 by rpki-client