Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e57e5d1-3aa3-3f24-8472-6a505111ce77.roa
File:                     9e57e5d1-3aa3-3f24-8472-6a505111ce77.roa (raw, json)
Hash identifier:          318xtd0WHjQtPDVS545gXmHYlqTySKTawWOKFoblIXQ=
Subject key identifier:   83:8C:69:50:FF:70:02:72:C4:3E:0B:25:64:E8:83:F6:0C:B9:E5:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3E5F58E3442F4FE08F70DC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e57e5d1-3aa3-3f24-8472-6a505111ce77.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     396599
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:58:e3:44:2f:4f:e0:8f:70:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=13e978af-cfdb-4b71-883c-f0e432a0c276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:a0:42:2e:13:d7:82:8f:4f:1b:a0:a0:16:
                    ee:00:43:b1:f0:8d:7e:f3:61:bb:85:f4:08:aa:61:
                    26:b6:87:94:4d:79:23:48:93:dc:eb:74:90:6c:8c:
                    c7:ee:92:66:08:fd:bf:9d:24:d2:87:fe:5d:f7:ce:
                    f7:71:93:e5:4e:d3:e4:ad:37:a9:b2:5f:5c:bc:ba:
                    c7:ad:26:c1:b6:63:a4:12:25:4a:2f:32:3f:b6:a0:
                    85:f8:8d:3a:9d:c8:21:77:b9:11:c2:2e:9d:94:be:
                    18:59:90:c8:39:fa:56:d8:34:82:b6:17:b3:89:7e:
                    90:80:65:8d:a1:49:45:49:b4:89:b3:b2:d0:39:ce:
                    7e:6e:b1:de:54:46:9c:66:d9:19:38:e0:6a:1d:f2:
                    ea:25:ce:67:9b:35:13:dc:43:77:bb:a1:11:db:ab:
                    d9:5d:f6:24:58:87:3b:ce:94:4a:d6:29:39:fb:3d:
                    fc:c4:01:8f:5f:18:95:15:a7:c4:55:c6:76:93:55:
                    6b:5d:9a:bb:fe:97:85:1d:69:f0:49:f8:f8:10:1c:
                    c1:2f:75:0a:bd:2b:1a:5e:6d:f3:ec:32:73:b8:5d:
                    d3:54:3a:e8:e9:fa:d4:b9:fa:fe:80:ea:98:55:48:
                    46:9b:c6:f4:8c:5f:c1:db:0f:45:5f:32:7e:6c:db:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8C:69:50:FF:70:02:72:C4:3E:0B:25:64:E8:83:F6:0C:B9:E5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e57e5d1-3aa3-3f24-8472-6a505111ce77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:3b:66:82:1b:c4:fc:1a:2a:fa:0b:c8:00:4a:48:62:69:
         a4:69:01:44:f8:67:36:fd:e9:56:25:8a:1f:c1:8b:66:12:1b:
         43:d0:6d:4d:21:b2:d8:e4:92:95:c1:f7:34:5d:04:ee:78:e6:
         0d:47:01:a4:ec:7c:74:d9:69:98:ce:41:d7:e7:5d:0f:1c:0a:
         57:e9:81:fc:b8:ca:52:17:a9:a2:de:51:77:59:c2:39:98:57:
         37:f7:4c:eb:73:d6:f6:ce:5b:c7:22:b4:97:f6:06:29:2c:b1:
         cb:ce:d1:b6:af:cc:1b:a1:34:33:92:a1:11:01:f7:06:e2:a6:
         33:05:15:9f:3e:d8:a6:40:1d:34:11:b4:14:dd:9e:ab:56:ac:
         9b:88:d1:86:7d:46:1c:e6:7b:3f:1c:3e:c0:1b:63:37:d1:a0:
         7e:67:7e:6e:c3:31:39:f3:48:6d:1f:10:b2:ad:34:d5:b3:09:
         41:27:df:80:1f:ed:e8:46:e8:d9:ac:11:1a:e0:81:22:99:c3:
         b2:2a:cc:33:77:48:47:78:f7:1a:fa:64:c2:75:0a:79:16:94:
         1a:79:f6:dc:9e:21:1f:e8:65:68:2f:7f:f4:31:5d:d0:2d:ca:
         7d:22:f1:7e:0e:bd:99:00:25:ef:dd:36:32:24:9f:b4:d2:87:
         48:c3:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:41:56 2026 by rpki-client