Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa
File:                     c6c3fd29-9dca-371f-9a2f-043097e71dde.roa (raw, json)
Hash identifier:          bUiEeaNKdzJ9XdsCzpCt95iZaO+FAKX5jEsXx5WGvdU=
Subject key identifier:   C5:F3:B4:72:C0:CA:60:BB:63:61:FC:EE:E4:81:97:B0:C0:2F:81:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9ECCA407B22B7DFFA7020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     397199
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:ec:ca:40:7b:22:b7:df:fa:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=8e8449fc-bcb4-46e0-bf6a-5a186b2c01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:18:58:1b:4e:12:5b:10:4e:e9:33:28:17:
                    f7:98:12:b4:0c:03:ce:25:2e:5a:df:81:e3:a9:fb:
                    f3:76:b5:6c:ed:3f:28:ae:a2:25:f8:e5:1a:1f:5f:
                    cf:65:0a:69:57:d9:6a:89:cb:41:a8:f3:42:24:59:
                    13:7d:93:2a:72:ac:11:ca:e4:28:fd:ce:fd:ef:c0:
                    1c:21:2b:f9:cb:d9:7d:a0:64:45:7b:3a:cb:99:a9:
                    8c:8c:3d:7b:69:d2:a2:d4:d0:66:85:d0:b7:a4:2b:
                    c1:e8:fe:36:d2:13:07:4d:a2:4f:cc:d6:0d:59:db:
                    12:1b:cc:cc:e9:43:d5:5a:1f:d8:b6:07:eb:5e:6c:
                    b6:90:72:c4:26:62:e2:7b:21:32:ec:5a:32:3d:f0:
                    27:fb:74:c1:6b:8c:fb:b3:49:7f:a1:20:e7:27:17:
                    e3:c7:6d:b4:ee:b1:48:99:47:18:4f:a2:80:e4:e2:
                    ac:42:0f:37:80:41:f1:b0:08:e3:19:00:7d:6e:b6:
                    a3:16:b0:53:93:06:ff:87:47:93:07:be:e2:4f:83:
                    8f:39:3b:28:58:8d:fa:8e:7a:ea:e9:13:4c:bd:28:
                    cf:93:3d:52:8f:5d:3b:94:43:96:f8:69:50:8f:09:
                    1a:4f:fa:48:48:28:73:58:95:e3:5c:4b:1e:05:b1:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:B4:72:C0:CA:60:BB:63:61:FC:EE:E4:81:97:B0:C0:2F:81:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:a9:a7:41:22:16:67:74:bf:d7:43:60:52:c0:94:1a:c5:
         51:03:9c:aa:3f:e0:f5:e8:d9:ef:13:6f:d6:e8:fd:47:fe:3c:
         f4:79:a0:72:cb:a3:fa:6e:a0:ae:0f:d0:23:6b:84:88:4e:58:
         dc:20:a3:a9:3a:ed:91:62:43:ab:2b:b7:eb:fd:fb:da:ea:9f:
         5c:60:35:7d:23:98:26:c5:85:21:3e:69:c2:15:63:de:7b:dc:
         bf:5f:35:b0:e1:a3:3d:6b:b8:88:15:11:19:97:72:3e:1b:4f:
         54:c4:8c:42:38:36:82:01:af:5d:23:b0:10:e3:a9:91:9d:01:
         12:32:f0:00:24:59:55:71:be:b5:4f:dc:39:19:9f:ff:9f:e8:
         e7:34:c1:0f:93:07:29:a7:3f:0d:d3:5e:ac:12:c4:fe:d8:43:
         a2:61:26:61:0f:00:11:1f:0b:f6:91:1f:ca:9b:45:6c:10:05:
         33:3e:b5:bb:fc:fd:f6:3f:e2:be:9b:d6:85:4a:b3:c9:26:62:
         13:6e:f8:d4:1f:12:09:17:3e:b1:d5:a2:90:55:76:f3:db:f1:
         e6:03:a3:3d:51:e2:5a:ee:96:6d:9d:1b:23:59:fc:53:27:3d:
         51:be:75:3f:5d:4b:18:64:48:bb:7d:af:55:e0:0e:1c:b7:fa:
         43:00:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:33:11 2026 by rpki-client