Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f7fd65-8a74-3a04-93c4-794bc397263c.roa
File:                     c3f7fd65-8a74-3a04-93c4-794bc397263c.roa (raw, json)
Hash identifier:          23q8Lbv3hrjymIuvfra9ObpSSfhHGf3lTEUeDSncS7E=
Subject key identifier:   80:43:F6:06:E3:BB:94:AB:37:DC:3C:E8:C4:AD:67:9A:FC:39:9B:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E92CE65B9F91FE36BC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f7fd65-8a74-3a04-93c4-794bc397263c.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396573
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e9:2c:e6:5b:9f:91:fe:36:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=084d6b44-54d1-4766-a604-938bfd72ebdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:f9:6c:71:38:ea:77:4a:54:00:b0:86:c5:
                    9b:e4:45:2c:d5:97:af:c0:e6:54:bb:0e:ce:de:7d:
                    8e:8d:8f:22:17:cd:a8:f3:0c:48:69:69:61:31:79:
                    49:c8:b0:7d:dd:55:d9:88:5b:fc:82:61:d1:49:05:
                    72:91:30:73:55:5b:da:2a:75:37:10:f5:16:ec:fe:
                    43:f2:85:99:ef:00:11:2f:85:a6:0e:b1:60:45:ce:
                    f1:47:09:f5:16:19:39:26:34:d3:14:d6:ea:d1:22:
                    2b:7e:16:34:36:7a:4b:c6:8e:39:50:9f:01:94:dd:
                    af:2b:fd:7e:89:cd:2c:9d:c9:e5:be:a1:fe:91:3d:
                    5d:16:fe:61:92:1c:e3:7c:9f:45:b9:0c:12:41:75:
                    32:7e:a9:89:60:d6:79:b0:ad:de:9c:66:4b:d9:35:
                    ba:a9:15:e9:ed:41:08:8d:4a:7a:4d:c6:ed:a9:b3:
                    04:92:7e:16:c3:c7:ed:d6:74:af:2c:e3:0a:24:c1:
                    dc:6b:3f:74:7e:bf:01:f5:18:4d:d3:39:83:5d:2e:
                    c3:79:40:5f:53:bd:7a:75:7e:35:bb:18:4e:b1:50:
                    6d:a7:a5:41:be:4f:e1:c3:71:d6:62:d5:2a:5e:cb:
                    32:31:96:72:8d:12:c8:b4:bb:e3:72:bc:da:b1:74:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:43:F6:06:E3:BB:94:AB:37:DC:3C:E8:C4:AD:67:9A:FC:39:9B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f7fd65-8a74-3a04-93c4-794bc397263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:5d:63:d5:88:09:91:e5:6d:07:bb:0c:96:31:7c:55:5a:
         84:0c:ea:fd:17:dc:db:a0:ef:05:68:61:10:d6:28:55:25:03:
         10:47:2d:e1:ba:b4:2e:c1:a5:7e:8a:0e:9c:4c:c6:7c:fe:23:
         31:35:72:bc:69:29:9e:3d:d3:0c:3b:7b:ba:64:66:8e:64:4b:
         10:23:45:3d:bd:52:f7:3d:93:26:6f:9e:e8:7d:b8:a3:aa:6a:
         12:0d:a4:c5:0d:3a:76:6e:86:6d:77:a5:cd:a5:e4:13:1b:36:
         e8:fe:c3:dc:1d:dc:60:39:3c:7c:da:dd:57:87:22:19:f4:f5:
         49:61:e0:9c:72:7a:c0:ca:33:74:7d:59:92:e9:43:76:45:2b:
         92:94:ac:d6:10:90:97:6c:bb:a8:e8:81:28:5a:a2:6e:5a:5f:
         38:8c:b8:b9:2a:b0:9a:69:c0:a4:0e:34:13:5a:a5:ef:a1:b8:
         eb:b7:8d:5c:b6:a4:5d:d3:a7:95:10:3d:ac:43:d6:bb:c6:91:
         c0:91:e1:b4:0b:41:66:51:6f:de:ff:0d:f4:db:b5:50:af:67:
         44:21:9d:30:0d:83:10:40:2f:c2:cd:82:6d:79:90:35:31:a0:
         1c:c6:db:be:be:49:69:a3:6b:b8:d6:d2:19:07:6f:8c:42:e9:
         f0:c8:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:39:09 2026 by rpki-client