Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa
File:                     9464097c-6aa9-3326-b71a-f87166a12a72.roa (raw, json)
Hash identifier:          MJnQup9rJNXwXz44CHjOU7HmUUJ2RfQ6tvLO5ttzeKs=
Subject key identifier:   E8:C1:7E:FF:5F:80:D9:22:C6:EF:88:09:EB:EA:4F:F0:9E:9E:3F:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F153CB24D9468BFD2F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     211369
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:15:3c:b2:4d:94:68:bf:d2:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=383b697a-be2b-4437-a463-f5b3d4b67db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:24:42:58:79:78:78:5c:04:c7:75:a3:16:
                    9c:2b:77:bf:fe:ed:7c:59:7e:3e:bc:c2:f1:21:53:
                    6d:da:32:54:20:9a:54:54:67:e2:65:cf:bf:25:db:
                    dd:ad:b7:6a:47:16:44:63:59:76:92:f0:66:ee:95:
                    47:84:04:63:28:a3:33:d8:4c:68:d5:e3:3f:e7:af:
                    32:71:84:ad:7b:bd:01:d5:9d:34:bd:26:47:dc:b3:
                    b5:18:81:8a:90:76:83:b2:28:61:90:95:89:45:1d:
                    fc:82:68:f6:d2:d9:93:9e:a9:62:15:38:d7:c0:2a:
                    1d:25:85:38:d0:04:05:f3:72:60:d0:cb:0b:3e:c9:
                    4a:33:06:6a:51:d7:05:88:ee:f1:bb:20:c6:8b:13:
                    43:69:eb:0b:ff:6a:da:79:0b:aa:04:8d:f2:ca:d7:
                    58:ed:86:4c:13:70:90:1a:3d:2d:f8:69:44:cf:a7:
                    f1:5c:ba:9c:85:70:8f:60:d0:21:25:b0:21:76:7f:
                    94:d8:9d:f4:f3:12:47:66:72:24:22:46:e5:a6:4b:
                    ab:07:32:7e:95:db:dc:d6:a7:f6:7e:d5:03:ce:c6:
                    16:85:89:20:61:7b:3c:ac:d4:31:99:5c:ff:c7:9a:
                    06:15:bc:a8:6d:59:20:52:90:7c:be:ca:40:12:37:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:7E:FF:5F:80:D9:22:C6:EF:88:09:EB:EA:4F:F0:9E:9E:3F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:2e:ec:9f:f1:4a:36:be:eb:b4:3e:82:e6:bd:3b:e7:1e:
         8f:e8:8a:cc:65:be:a5:fe:6f:fb:58:c1:ec:61:fc:2a:25:fe:
         b5:40:59:ee:ab:ac:6c:af:8a:13:2b:26:8b:31:c2:f7:30:4b:
         a5:bf:af:c4:9b:79:5e:1b:0a:14:eb:45:e1:fa:e0:0c:69:0c:
         df:78:95:bb:2e:c1:9d:1b:a4:13:f0:4c:0f:0d:3d:a1:c2:87:
         b9:d6:aa:ef:f3:bd:c6:72:c0:f6:46:61:f2:1b:ef:98:1f:a8:
         0b:28:ad:53:67:27:9a:21:1d:9e:fa:42:13:44:60:ab:02:4b:
         4e:37:bf:bf:ff:3f:6f:ad:f9:25:65:38:00:7a:48:d0:98:45:
         ff:b3:80:02:9a:41:39:43:d0:0d:c7:1d:a6:41:3a:df:f7:a2:
         5c:c5:e8:bb:70:d6:e2:9a:23:e9:d7:27:37:6e:d3:44:85:6e:
         68:19:75:22:9f:ce:29:da:33:29:9b:6e:43:d2:f4:da:d4:67:
         fb:27:b4:fd:c5:2f:02:17:43:b1:2b:46:a4:e0:ab:72:7d:b4:
         95:a6:00:d4:0a:fe:f8:a8:fa:ed:1a:1c:42:54:e1:ce:21:f3:
         1f:fd:cf:47:4b:6e:84:73:45:36:da:fd:2b:7c:3a:a6:8b:07:
         61:03:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:45:03 2026 by rpki-client