Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0c43988-360d-3197-98f2-8c6c457e6e03.roa
File:                     e0c43988-360d-3197-98f2-8c6c457e6e03.roa (raw, json)
Hash identifier:          7i/98TO619qMLlXHZ4D2K9e4gIRx4JcWsCQR+caz7nM=
Subject key identifier:   B4:35:85:BC:90:AD:E2:92:F0:4F:CB:E2:46:0F:E8:39:4B:F8:CC:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9DF01312D30E7A1268C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0c43988-360d-3197-98f2-8c6c457e6e03.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396572
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:df:01:31:2d:30:e7:a1:26:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b15952f6-fd78-4bb5-a6e4-d4addd8c72f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:13:43:34:b4:e8:de:05:3c:2f:eb:13:bf:
                    b3:e5:47:21:43:50:36:25:a4:34:c6:76:c3:8e:a2:
                    42:12:88:d2:eb:83:73:9d:5f:01:36:e8:49:89:06:
                    fc:b7:5e:d5:de:94:aa:c6:4f:28:77:ff:15:aa:ef:
                    b6:b8:b4:74:0d:dc:20:e8:12:1a:d4:51:b8:8f:8c:
                    d7:e6:a4:dc:7c:d2:28:d2:1e:07:46:a8:5f:44:c7:
                    9f:84:a6:9a:d4:d4:07:da:80:85:bd:8e:32:67:7d:
                    41:cc:c4:52:b0:ca:e9:04:44:a0:2a:84:67:64:c2:
                    e1:bc:ab:0f:cd:35:01:fc:a5:f7:ca:85:28:33:d9:
                    2c:8b:01:04:c8:36:a4:56:b7:01:1b:3b:29:4d:71:
                    3c:dd:a2:27:a4:7d:b5:7d:1a:7c:e8:96:3a:cb:be:
                    01:b9:2a:8d:5d:7a:4a:87:7c:fc:06:98:a1:86:fa:
                    61:c3:fd:67:9c:2e:00:72:7c:93:82:6e:e0:cd:bf:
                    f2:18:47:a1:05:ad:c6:d8:f0:91:c1:ce:19:e5:26:
                    ad:74:b7:aa:5a:af:23:4e:b8:95:f6:1e:9a:88:92:
                    6d:94:b7:ba:1d:58:dd:b4:49:cf:7f:a4:04:03:e2:
                    a7:59:05:59:c6:86:45:84:f6:b2:8b:21:93:be:4e:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:85:BC:90:AD:E2:92:F0:4F:CB:E2:46:0F:E8:39:4B:F8:CC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0c43988-360d-3197-98f2-8c6c457e6e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:74:dd:34:36:86:a4:b0:ea:e5:c7:82:fb:a8:13:08:7d:c5:
         9c:72:6e:30:5b:76:db:8d:3f:8c:21:d4:83:90:c2:e4:b7:11:
         26:78:80:fd:57:fa:01:bc:94:f8:a7:1c:9b:63:31:d5:48:11:
         ab:dc:e4:2e:41:0a:19:96:4f:da:a5:f4:20:f8:48:55:37:d7:
         a4:f7:84:fd:ba:15:39:f8:37:2a:6c:bd:49:83:31:9c:cb:45:
         1b:f5:1a:e6:d2:e6:0d:52:95:d9:05:71:fa:c7:48:0b:c9:b3:
         65:2c:f3:b5:51:b4:74:3b:47:e5:01:6d:8f:b2:9d:88:88:ed:
         d9:97:63:98:1d:c0:e2:59:a9:5b:6f:71:60:39:40:61:7c:61:
         de:e7:1d:29:50:9d:61:86:fe:cf:66:aa:88:ab:ea:a1:5c:ab:
         20:f1:c7:e7:9d:71:21:7b:67:c3:1f:f6:25:86:78:81:59:97:
         9c:ef:4a:ba:25:28:30:bb:b2:0d:17:39:3e:fe:f6:89:73:33:
         98:f9:26:6e:1c:f8:9e:ed:e6:1d:49:00:cb:c8:11:29:36:c8:
         62:48:65:2e:77:35:2e:88:62:c7:94:1a:51:65:3b:08:e1:9d:
         09:04:c7:69:44:94:c8:20:31:58:af:17:ce:da:ac:06:b2:ec:
         e2:48:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:42:22 2026 by rpki-client