Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa
File:                     d0b35dbe-6222-3779-becf-77ca814b407a.roa (raw, json)
Hash identifier:          3N4XdhHgQuxjVRCJaWVmpPa9GLjSMeOckxpM1dfwvQY=
Subject key identifier:   52:88:DA:CF:5A:3A:78:0B:C7:C9:C4:45:43:D5:20:10:1F:A7:EA:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3E5F1928B842674A1B593FD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     36617
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:19:28:b8:42:67:4a:1b:59:3f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=f6069006-19fa-400e-b209-445690266674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:e5:5a:50:cb:3d:20:6e:5f:48:9c:ac:10:
                    f0:01:9a:79:62:a7:d6:89:31:39:c8:95:76:15:0d:
                    85:e9:66:32:22:c7:97:be:4e:ef:62:e0:9e:36:f3:
                    70:01:c5:b8:cd:9e:0f:96:f5:cb:3a:d6:69:2a:97:
                    63:3d:8e:b6:ed:f3:6a:b1:79:ec:f9:a3:31:d5:fc:
                    da:c3:7f:c3:b9:0f:0d:4a:6a:af:8d:94:d0:41:33:
                    4c:7b:ad:76:e8:6c:9b:b8:6b:78:a7:fc:76:08:23:
                    36:d8:ad:87:46:fe:bb:d4:43:d5:67:2a:c4:7e:97:
                    1d:c4:bd:36:7b:7c:5c:eb:0b:13:3a:d1:df:f0:a4:
                    10:52:68:82:37:75:d2:f7:cf:92:aa:a8:e7:47:03:
                    08:d0:5a:a8:31:98:c5:e0:0a:89:5d:83:90:f1:54:
                    e7:b5:7f:de:df:e2:54:56:88:fb:b4:20:07:40:21:
                    11:63:eb:35:96:08:52:ce:1d:93:99:65:d2:97:4f:
                    e5:a6:ab:3e:20:ff:a6:c1:c3:b7:4c:5b:a7:61:49:
                    29:85:a4:60:88:16:db:20:79:5c:5c:73:cd:e1:70:
                    f2:db:0f:23:76:56:8e:82:46:88:fe:7b:d5:65:50:
                    be:46:f4:fd:bc:42:4a:41:5e:f4:f4:81:5e:8f:38:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:DA:CF:5A:3A:78:0B:C7:C9:C4:45:43:D5:20:10:1F:A7:EA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:dd:c5:a2:aa:21:b3:e6:4a:db:09:b3:4d:8b:45:81:dc:
         9a:0f:52:d2:b5:12:44:2e:16:72:d8:b0:22:5a:31:7e:b2:77:
         8b:a0:23:2f:fd:30:5d:1f:52:1a:42:4b:9b:60:d4:f1:c4:a4:
         0e:19:1e:01:8d:f7:12:43:72:34:f9:1a:c3:6b:0a:b1:24:8a:
         a4:67:4e:4f:c2:fd:05:57:56:a1:90:be:ee:2c:21:f7:e7:b1:
         c8:db:ff:70:4b:b9:53:2f:fd:c9:20:a0:f4:35:51:90:dc:8c:
         da:31:5c:f9:58:5b:98:03:90:f5:b9:0a:bc:19:43:ce:f8:c0:
         50:c4:3e:9d:0a:8c:23:83:af:9d:fa:76:7b:05:78:69:9f:e4:
         ed:a2:a4:bc:eb:32:66:8f:ac:d6:9a:a3:06:69:c2:f6:13:5e:
         4e:c4:3b:aa:6a:a7:b3:b3:b0:9c:ce:a1:57:e3:82:d4:f9:02:
         1b:75:1f:1f:94:06:6c:aa:87:f0:f2:d3:a1:61:a5:5a:80:f3:
         d1:d1:47:54:fa:0b:df:7c:da:7f:d2:cb:56:e8:0d:2d:1f:39:
         ff:ce:46:af:c4:3f:68:f6:34:4e:1c:8e:71:a2:fc:e5:5c:2c:
         36:ee:69:6b:40:b0:b7:c6:43:ed:c9:60:5f:c4:aa:68:b6:59:
         af:47:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:54:12 2026 by rpki-client