Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa
File:                     0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa (raw, json)
Hash identifier:          Q/hMRXev15bN1GU5PQi3pZpp2ogFkzWXJqe0Y0ulF1g=
Subject key identifier:   45:07:4A:AB:86:2E:21:6D:6B:85:FC:51:28:A1:E6:5E:08:1B:ED:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E443F3DF4075C15D96DDB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396587
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3f:3d:f4:07:5c:15:d9:6d:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6e7d9f7e-de59-46f2-ab46-9ac4ece575c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:ac:95:55:2c:39:52:fb:16:ec:15:c5:e2:
                    85:ee:85:77:57:0a:14:05:51:f6:86:6f:cb:5d:36:
                    0e:86:aa:2c:70:cc:59:a1:59:3d:03:21:0c:56:8c:
                    4a:e4:33:ca:1b:dd:47:2f:d0:88:bc:2f:7f:25:da:
                    78:62:d7:59:c7:9a:7d:35:6a:8c:98:93:41:70:7b:
                    78:f9:62:05:7a:ab:33:ce:1f:4e:70:0b:2f:5b:64:
                    39:88:35:80:a2:ba:de:01:00:1b:7f:ad:38:ad:97:
                    dd:de:78:a3:ef:3a:8a:7a:33:80:74:9f:11:58:0e:
                    3a:29:74:ff:ef:27:4b:9e:68:b0:bf:6f:99:af:c8:
                    99:6b:d5:e6:15:0a:85:72:38:20:3c:82:53:81:cc:
                    3d:fc:86:47:b7:e0:a2:97:a5:2f:0c:dc:22:11:37:
                    73:ec:f5:db:83:75:58:57:bf:be:b5:1a:dc:9e:8b:
                    82:77:54:b1:e7:19:55:35:83:9c:7d:90:da:b7:57:
                    e5:2e:a2:17:46:c3:72:3f:8e:cc:66:7c:73:87:d1:
                    d4:ad:87:d6:65:01:ae:57:bf:d1:65:76:10:9d:dc:
                    5d:18:10:06:f5:46:93:4d:39:eb:6a:38:02:54:f6:
                    8c:27:16:6b:c5:9b:01:ba:71:8d:89:86:80:ca:de:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:07:4A:AB:86:2E:21:6D:6B:85:FC:51:28:A1:E6:5E:08:1B:ED:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:2a:22:87:88:b8:c6:95:32:41:9c:a3:68:b2:5c:5d:ae:
         11:6f:0f:5a:33:98:9b:ce:c4:c6:21:96:10:96:6d:a6:a7:6a:
         53:ae:81:05:a1:5f:da:95:e6:eb:e1:5c:67:34:65:11:b8:e7:
         54:20:f6:c2:9c:db:a8:83:a5:23:f1:fb:2b:9d:98:10:3d:07:
         86:91:7c:97:a0:65:6a:a2:df:85:42:07:2c:96:3c:fc:f9:01:
         a3:04:9a:27:d9:cd:54:a3:8d:29:ae:a7:30:29:94:db:dc:0b:
         66:05:f3:ef:e2:23:71:e9:9a:f0:f3:b8:6d:f9:ba:b9:20:31:
         a4:0d:2d:eb:ab:15:dd:06:88:4e:1e:95:cd:a9:c2:8c:a6:5c:
         d1:1c:8c:4c:7d:09:98:03:d2:97:f3:c5:b8:77:26:e8:a9:c8:
         d7:d2:8c:6b:43:a9:4d:02:31:97:91:18:da:59:38:32:15:87:
         c5:33:35:62:37:7a:49:69:54:1a:92:71:e8:75:52:85:a8:bc:
         2c:2a:47:c7:fb:c7:7e:d7:5a:09:ff:48:20:e7:59:b8:40:64:
         5f:a5:fe:39:6a:dc:1a:5f:d4:f4:b8:1f:11:4d:48:2c:c0:0a:
         fd:b8:0e:b9:59:2b:9c:b2:41:ee:bd:27:12:91:4f:1e:1d:25:
         51:77:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:59 2026 by rpki-client