Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0068aa87-f38e-3e77-ae75-4ce24d0f869a.roa
File:                     0068aa87-f38e-3e77-ae75-4ce24d0f869a.roa (raw, json)
Hash identifier:          DhTm13o/kIjCDwm4Fwwur3YBJ1IF2Svs5urh2mZlqyM=
Subject key identifier:   6B:01:C2:A7:E2:3D:DC:ED:09:3E:B0:73:8A:2C:E9:52:23:CB:50:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2274474A95685B6E09CD4180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0068aa87-f38e-3e77-ae75-4ce24d0f869a.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     396599
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:47:4a:95:68:5b:6e:09:cd:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=47e935d4-93a1-4e12-87ca-564a8fc20618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:96:e2:bb:24:1a:3e:7a:4b:cc:25:c1:f9:
                    62:c8:a3:02:df:e3:6c:26:ca:53:c8:ad:a5:8d:19:
                    11:f6:df:11:54:28:9a:0d:a1:fe:aa:00:17:86:53:
                    d6:a7:46:34:4b:e1:0b:0b:4e:4d:f6:5b:89:53:89:
                    c2:1a:6b:7f:61:6b:2b:50:a8:f8:3f:1d:7a:e0:aa:
                    59:f1:59:53:db:54:6e:76:f4:08:df:78:5a:94:27:
                    72:00:e5:1f:6b:97:43:b9:c4:bc:0b:d7:c8:dd:0c:
                    a3:2c:88:97:b9:f0:97:4a:9f:bd:c1:bd:ec:44:5f:
                    56:6d:cf:4e:41:d9:95:19:bb:25:2d:5e:29:e0:44:
                    c4:a9:af:a7:e8:33:a4:41:4d:3e:8d:e5:2e:b0:85:
                    29:82:af:cf:61:32:16:f4:55:26:96:c2:e1:90:aa:
                    9f:df:cf:38:c4:9d:c2:d4:10:ae:cb:58:93:79:2a:
                    23:87:68:f8:e6:af:c9:81:35:e6:ab:7a:26:35:76:
                    76:3e:23:98:cb:6e:f6:d5:78:b9:d3:76:5b:f1:4f:
                    2f:f5:ac:53:3c:52:f8:11:05:9d:8d:77:52:0f:e9:
                    81:c3:89:41:4e:42:12:0b:69:ee:4f:a3:51:dd:07:
                    9b:47:07:70:6b:b0:d3:69:02:15:37:4d:6e:95:78:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:C2:A7:E2:3D:DC:ED:09:3E:B0:73:8A:2C:E9:52:23:CB:50:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0068aa87-f38e-3e77-ae75-4ce24d0f869a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:f1:b5:58:5e:66:27:f6:ed:15:a4:eb:9b:fa:14:a2:63:
         14:13:08:9b:4c:0f:6f:20:d3:6b:c0:f6:cb:59:4d:84:a7:ed:
         aa:28:fa:1e:69:c1:7d:65:9e:6c:9f:cc:66:7a:1b:a4:b1:7b:
         fc:8f:e2:64:43:25:47:b2:5a:ad:bd:4f:8b:e3:11:41:e5:57:
         0e:99:e6:d4:dc:99:89:d6:b2:6f:73:5d:18:94:03:f7:c8:50:
         57:94:a3:db:50:90:9d:bb:f0:89:50:b8:79:da:56:3d:53:34:
         b3:09:2f:df:f7:7c:64:c7:97:ef:79:d9:60:45:53:a6:f0:08:
         2b:b9:1b:6b:b6:e7:e2:7d:f4:56:6c:8d:c6:83:5b:6e:71:57:
         09:29:81:7c:c0:d5:02:89:e3:b9:00:81:ca:df:42:47:64:ac:
         58:24:18:77:ef:f7:9d:64:b8:f3:3d:4e:f3:19:eb:4e:7c:39:
         43:50:d2:07:9d:8a:67:09:81:9e:5f:3d:41:e6:3e:20:b9:f8:
         37:29:67:3c:8f:38:57:17:a9:50:62:1b:ec:ce:6c:a1:45:d4:
         cc:56:83:3b:a7:f4:25:5d:4f:8d:57:76:aa:18:33:1f:6b:05:
         a9:b6:e6:ad:3f:1f:d9:59:12:64:41:d0:ed:ee:9d:89:87:fa:
         bd:45:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:10 2026 by rpki-client