Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa
File:                     006d461a-be1d-3d5b-8ee4-661db1716994.roa (raw, json)
Hash identifier:          BfjX9GVYU+VE6wWA/BPTGPav4TsaZwW2BWGYEr2mDaY=
Subject key identifier:   6C:68:C7:EF:58:55:6C:2F:C8:62:E3:57:AC:6D:82:41:14:DC:BD:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3C0FC8229ADEFB2726C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     40717
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3c:0f:c8:22:9a:de:fb:27:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=79095ba9-9d9e-4c1e-ac79-ac54fa9526da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:d1:96:92:b7:96:63:d0:35:7c:85:9a:f7:
                    19:a8:65:3b:54:06:2e:24:d6:02:d2:06:70:e3:cc:
                    98:df:01:75:0e:e8:87:eb:4e:96:0a:c5:8e:cf:e0:
                    37:6f:3f:ce:97:cf:92:81:61:06:a9:84:1a:71:13:
                    7e:b1:47:17:fb:09:85:3d:e0:99:b4:c5:ac:65:80:
                    b2:ac:ea:db:cf:c9:2d:ae:88:c0:2c:6c:95:dc:62:
                    73:ea:1a:a6:9b:b8:e5:90:2a:78:2f:38:bd:a9:98:
                    55:15:51:2b:b6:d1:9b:8c:df:90:e2:dd:02:83:7d:
                    77:69:b9:a1:31:58:24:48:30:d3:a3:63:38:a6:49:
                    1c:10:94:9b:68:b6:45:1f:30:ff:dd:f7:01:8c:01:
                    53:e8:b5:1a:13:fa:c5:a2:1b:de:63:99:e5:cd:c9:
                    73:23:ac:6a:91:a5:23:76:03:cc:8c:a3:34:34:70:
                    f3:e5:d0:49:17:3c:24:ef:5e:9a:cb:69:79:51:f1:
                    95:1d:45:c8:44:3a:21:dc:29:6b:76:fb:f9:bf:75:
                    fd:ef:61:ae:9a:ca:eb:0d:88:a1:e8:bb:f6:18:bd:
                    12:a0:d6:d1:73:6f:28:c4:ad:80:50:f3:8e:32:8b:
                    33:fa:1e:42:54:47:07:db:54:31:87:85:07:64:94:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:C7:EF:58:55:6C:2F:C8:62:E3:57:AC:6D:82:41:14:DC:BD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:c1:79:2a:b9:e1:51:c2:d8:56:b5:45:b3:63:99:13:4b:
         3d:4a:7a:a9:d0:87:b1:c5:1c:00:89:17:b2:1d:cb:28:da:58:
         66:fe:3d:ea:4e:87:ef:40:63:1d:29:56:ec:c6:c1:37:07:13:
         32:2b:fc:32:a3:58:57:0c:11:84:68:b7:43:87:3d:15:2d:93:
         e8:49:1d:39:74:a2:5a:9c:27:53:52:12:5e:35:cb:a7:4b:50:
         fe:4f:57:98:37:e6:f1:79:4b:38:bd:e8:3a:13:77:90:7f:62:
         16:2d:cf:95:cc:82:57:5e:7c:40:28:96:6b:9b:19:5f:d3:8d:
         7e:60:da:46:87:7f:80:89:7e:59:c6:a0:88:21:f0:64:0d:1a:
         b4:e5:06:64:ff:b6:6d:d9:6e:dc:67:56:65:8d:47:2c:af:fd:
         cc:ef:8a:f0:cb:52:47:3e:34:2d:30:a8:60:d7:27:7f:70:15:
         2c:b3:3d:7b:b5:d8:df:c4:de:a5:63:99:e3:6c:06:5a:79:17:
         68:cc:46:82:36:de:d8:78:0c:2d:43:4f:4b:e1:87:87:42:e7:
         46:97:6f:74:6c:12:79:ab:87:6e:ea:24:0a:70:74:94:0d:57:
         0a:dd:3b:0c:32:10:ce:0d:0b:72:44:ae:6f:5d:fd:05:d3:67:
         44:7a:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:07 2026 by rpki-client