Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7873b67-8035-3366-9522-55d510bf06d6.roa
File:                     c7873b67-8035-3366-9522-55d510bf06d6.roa (raw, json)
Hash identifier:          pU/OBSKj8zb0mKi/6ktCykDpTs1caCm+b0OsBAhnXi0=
Subject key identifier:   A2:7B:5D:A5:8A:E4:54:D4:BC:A2:7C:D2:9D:0F:8C:07:74:0C:47:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E25195EA54C533169E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7873b67-8035-3366-9522-55d510bf06d6.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     36618
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e2:51:95:ea:54:c5:33:16:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=55a0fa9d-5d22-4e2d-ad78-2e5b690c5672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:b4:de:6b:13:9a:32:c4:83:42:c0:b8:66:
                    e5:de:37:57:8b:7c:c8:c0:e3:71:c8:ae:3a:b3:1d:
                    c0:fb:ea:1e:f9:7d:f9:bb:8a:27:b5:7f:f2:3d:1c:
                    af:85:9d:68:aa:8c:22:03:e3:19:94:32:30:04:0e:
                    58:59:6c:e3:85:71:11:f9:03:dc:2a:35:29:7d:6a:
                    cf:d9:df:8e:74:72:91:28:90:25:0e:14:05:8c:12:
                    cd:11:d6:53:1b:dd:a2:72:f7:46:e6:0d:63:63:a0:
                    26:e7:9d:29:d7:4c:9f:8d:39:51:f5:fc:5b:3d:f1:
                    15:41:8a:df:b9:01:c7:5a:fc:be:5a:cc:1f:88:57:
                    b2:36:61:cf:54:7b:69:fa:0d:3c:d7:20:4d:30:0f:
                    cd:58:63:59:d1:d1:3b:05:90:ec:af:81:dd:e9:83:
                    8b:f4:a6:2e:6f:39:61:a7:0d:45:37:06:d7:e9:75:
                    60:7a:72:36:40:cb:8e:08:2a:08:1a:b5:e8:82:fe:
                    f8:55:79:94:ea:46:db:b1:ba:b2:f1:82:70:4d:23:
                    71:db:7d:21:9d:95:83:31:87:dd:16:29:18:e9:47:
                    1b:8e:3a:52:94:36:55:5a:5a:3d:a3:59:54:eb:d9:
                    54:2b:ac:0d:e4:b9:c4:7d:50:70:3d:19:47:72:30:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7B:5D:A5:8A:E4:54:D4:BC:A2:7C:D2:9D:0F:8C:07:74:0C:47:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7873b67-8035-3366-9522-55d510bf06d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e5:ec:35:e8:45:a3:d4:71:2e:e4:28:72:f3:36:3c:66:a0:
         11:97:aa:39:22:59:80:1c:8b:34:30:14:55:af:b0:29:c9:9d:
         c6:04:95:5d:7f:e4:cc:6c:48:2b:a5:93:1f:97:aa:d2:b4:a3:
         e0:c5:93:9e:75:d5:7f:dc:75:b0:ea:99:43:39:a2:5c:60:cd:
         00:f8:e1:ed:08:c5:4e:6e:2b:a3:bc:11:c4:b8:7b:a7:c8:16:
         b1:bd:82:81:b1:ba:98:80:bb:bd:f5:20:a1:74:9a:73:09:55:
         b8:54:6e:e4:25:22:b6:59:64:8d:47:c3:77:d2:f7:76:08:b2:
         8c:88:dc:46:36:a8:e2:0f:ca:f6:ca:a1:15:12:83:e0:ea:07:
         d2:46:17:9e:2b:90:1a:6e:79:b0:66:bc:2e:10:e0:0b:59:0d:
         8c:f0:cb:ed:0c:9b:10:ba:a9:b2:6a:89:96:68:0d:cc:92:48:
         d0:eb:7a:b9:ea:34:4e:cf:28:e8:d1:01:26:d2:2f:8d:75:ef:
         3e:b0:c1:6d:3e:38:14:da:f5:78:40:a9:13:44:24:ae:10:f2:
         f6:21:e2:95:22:d6:c1:79:9a:28:15:00:2c:f2:0d:10:ff:83:
         a0:13:53:e3:e1:f5:8e:66:fa:1e:83:d7:16:24:8e:ee:e9:0a:
         7c:c0:09:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:43:03 2026 by rpki-client