Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91c95ef6-cb3a-38a2-8d74-a46706c39aeb.roa
File:                     91c95ef6-cb3a-38a2-8d74-a46706c39aeb.roa (raw, json)
Hash identifier:          lQciGVH9p/DUyxfjjEnv7/PW0PbJLVqv5E5lnhRTitY=
Subject key identifier:   43:12:13:72:99:E6:F9:BB:B4:8E:97:12:91:33:E6:9B:A8:3F:81:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E52656C5A4DD3BEF8CC8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91c95ef6-cb3a-38a2-8d74-a46706c39aeb.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     36625
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e5:26:56:c5:a4:dd:3b:ef:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=ded27ccf-2dd9-4396-93a8-02dd32865378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:e1:41:fb:3c:c5:e8:b3:1d:ae:c9:47:ee:
                    5e:22:16:b5:8c:4f:74:a6:f0:b3:d5:9d:a8:a4:50:
                    3e:5b:c2:69:74:73:6f:ef:d4:9c:bb:0d:d2:cb:41:
                    9b:84:16:06:c6:aa:49:db:1a:24:a0:d7:7d:37:d4:
                    dc:7f:5f:39:a8:80:ed:b6:0f:42:09:0b:90:ae:a9:
                    94:b1:1f:d6:11:d4:39:61:9f:3b:4d:55:8a:19:26:
                    a9:7c:e1:d9:28:3d:85:8c:71:51:0e:e7:fd:40:2e:
                    92:29:86:a9:14:c4:ba:8e:4b:80:be:8e:44:0d:a4:
                    47:d3:1f:e3:a7:72:27:e9:f0:51:89:7c:70:31:73:
                    29:44:13:df:19:cc:f6:51:08:4a:5f:e3:d6:c4:c4:
                    fa:ae:d0:79:5b:cd:bf:06:f4:95:d6:39:f7:0f:00:
                    25:08:c4:71:96:de:88:0b:d4:9f:5b:6c:c5:12:51:
                    ec:5b:a8:25:10:02:11:8d:a8:a9:82:fa:39:e5:ba:
                    ca:f9:7e:6c:f6:9e:5a:98:5f:72:8f:60:08:2c:13:
                    e7:22:e6:dc:2b:d0:25:4e:66:bd:77:ab:dd:ed:80:
                    42:2c:f2:16:f6:0d:94:9c:75:f7:18:1f:68:15:78:
                    9a:a1:c9:2b:4f:aa:cf:49:88:6d:67:e2:51:a9:20:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:13:72:99:E6:F9:BB:B4:8E:97:12:91:33:E6:9B:A8:3F:81:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91c95ef6-cb3a-38a2-8d74-a46706c39aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:dc:38:1e:2f:ed:6a:d0:35:53:10:ea:4b:e6:36:4d:2c:
         83:15:0d:9d:10:f7:f7:de:e4:b3:27:ff:9c:dc:d6:d3:ba:3b:
         79:c1:ad:6f:c6:bb:37:ab:5b:c1:3b:4e:69:5a:3d:8f:5a:de:
         5a:a8:b0:1c:59:8d:d2:e6:b3:1a:4f:67:e2:66:6c:a7:68:77:
         d9:a8:c0:13:02:bf:91:df:ee:7f:ba:0e:70:6b:75:27:45:52:
         c6:a5:e7:d9:1b:22:9d:ba:d2:c8:69:06:6d:17:1d:49:28:30:
         2e:5e:45:55:66:e5:ad:68:e2:bf:9c:7f:63:2d:69:d4:c3:1b:
         6e:d1:b7:12:0f:de:21:1a:fa:4c:f7:f9:95:3c:bb:d0:57:01:
         c3:96:28:76:9c:c1:7c:c9:2c:06:c3:38:76:14:ec:03:0b:18:
         73:1c:eb:6a:41:59:28:59:53:cf:36:3d:a6:c8:1d:37:d8:77:
         74:d2:4d:47:25:14:72:7d:6a:e7:da:28:ef:96:9a:b6:8b:cf:
         5c:b3:14:69:31:74:31:c0:8f:09:fe:8f:84:7d:92:21:9a:5c:
         15:11:8f:1a:a9:b9:1f:44:9c:d9:af:aa:ea:9f:96:f1:01:81:
         fb:95:c4:1b:99:88:b8:1b:46:6e:7e:12:5d:44:16:46:d9:27:
         56:93:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:51:46 2026 by rpki-client