Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa
File:                     de320641-fe0e-30b1-adf3-b3e5f41193c2.roa (raw, json)
Hash identifier:          CXEVAufUt3wCQSOcsCVpfqxYY6Nbh4UAh+dZl5Ij3zo=
Subject key identifier:   40:7C:33:B2:BB:64:A2:86:56:80:D3:74:52:BE:86:C2:28:82:10:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F76CF1D00D752B28D0200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396547
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:76:cf:1d:00:d7:52:b2:8d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c5488368-5dd2-49f2-bd11-f1288b3c7d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:97:5d:fb:78:1e:3c:60:b0:1d:68:17:3c:
                    10:d2:ae:b5:56:81:11:4e:fc:75:62:b7:7b:55:16:
                    a2:86:00:f5:9b:5a:3f:80:60:1d:d6:9e:be:86:cf:
                    45:01:87:24:9e:6a:fc:08:41:6f:72:98:38:d4:67:
                    80:5e:1e:98:55:15:7e:e9:33:15:7f:4a:46:11:a7:
                    22:91:19:86:14:d1:52:1a:e5:e2:e3:7c:76:b2:48:
                    96:57:aa:0c:cd:a2:cf:44:3b:fd:34:13:82:15:99:
                    12:65:ce:5d:30:3b:79:41:5b:f7:f5:25:2e:dc:1c:
                    6e:2a:60:b4:ea:6e:d3:e9:94:a6:43:c8:62:a6:78:
                    38:d6:fd:c5:bf:b0:6e:68:24:0b:36:58:b4:4b:e7:
                    c9:00:ef:8a:c9:95:49:06:43:d7:79:56:e2:60:6f:
                    a2:82:24:22:f6:c1:da:5b:03:23:0a:30:a3:51:a5:
                    40:08:c3:e6:bc:ca:37:91:e0:86:52:b0:7e:e1:98:
                    28:b6:b6:8c:cd:d8:f4:6b:84:1e:71:a5:f0:fd:1e:
                    fe:9c:47:2a:46:30:af:df:e6:61:cc:2e:38:47:71:
                    4d:83:3e:fb:5a:ce:6e:db:74:e9:fa:9b:8d:b4:98:
                    3d:64:85:47:b1:bc:db:14:d4:41:6d:a0:e0:2e:ef:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7C:33:B2:BB:64:A2:86:56:80:D3:74:52:BE:86:C2:28:82:10:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:76:bf:82:6e:c8:e9:91:24:9d:a3:22:e0:21:e8:1a:f7:b1:
         6f:a6:d0:a4:80:0f:78:44:36:a0:45:6e:d8:30:f7:64:46:d0:
         d9:25:e4:14:02:16:2f:dd:fd:20:3f:94:2e:ff:8a:06:51:4f:
         f4:7a:76:e9:de:61:e5:3e:76:2d:10:db:e9:07:93:7f:a2:91:
         f5:f7:ef:1d:34:29:f8:84:5b:3d:ba:20:47:9a:5c:5d:56:0d:
         7f:52:b2:77:6f:29:a3:be:a7:09:bf:1b:4e:9e:fe:a5:29:0a:
         69:37:ed:c6:64:fc:4c:34:26:c2:c4:eb:a9:6e:fa:50:81:4e:
         d4:6b:60:f0:c6:09:3d:14:80:e7:19:9b:3c:a5:33:ef:58:5f:
         27:17:3d:8c:c8:70:83:5a:4e:60:cc:0f:80:e4:06:d9:5c:59:
         f2:52:b7:3c:fd:35:c5:2a:04:6c:3b:84:fa:04:58:eb:c5:5c:
         7e:ed:d9:81:a3:94:72:ee:5a:6d:e7:af:14:e6:b2:89:f7:4a:
         87:ca:2d:ed:a3:f6:55:ff:5c:0e:35:f0:b8:e0:20:fd:5c:af:
         cf:56:10:45:8d:66:1f:75:a8:18:fb:81:de:07:4b:6b:6a:c5:
         5a:2a:98:4a:84:cb:64:64:8a:88:9b:63:ea:9e:79:c9:ae:72:
         ae:e1:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:36 2026 by rpki-client