Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1752d4a4-f952-3d21-816d-fd4fe3618541.roa
File:                     1752d4a4-f952-3d21-816d-fd4fe3618541.roa (raw, json)
Hash identifier:          Q+s1OuG5L7jpdX0zsjz9F3ek62UwzyBhaULPDaKzxtU=
Subject key identifier:   5C:4A:35:60:97:45:5A:E6:3B:C5:EB:54:10:C9:79:C8:55:1C:70:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7A23125DE569D838C680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1752d4a4-f952-3d21-816d-fd4fe3618541.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396550
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7a:23:12:5d:e5:69:d8:38:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=6f910250-703f-4884-b9ab-ac25b6a18c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:5f:2d:05:d3:71:f0:c7:9b:33:64:2d:ab:
                    bc:2a:b4:8f:fb:95:42:c9:33:b2:10:e4:c7:17:ed:
                    e7:8a:bf:55:a1:a0:46:9e:a3:4e:58:23:22:11:de:
                    d8:8a:a4:c0:70:d0:f6:c0:be:04:9b:f4:51:8f:b7:
                    ba:72:85:56:ea:b9:62:de:99:dd:6c:5e:2c:92:af:
                    3a:cf:df:63:5e:c2:53:5e:4f:6a:2a:ba:e2:02:ad:
                    16:f5:5e:e4:8c:92:1c:b4:77:5d:5b:af:0a:2d:84:
                    41:33:2a:ff:4d:a3:ff:e5:14:06:f3:52:3b:c3:7b:
                    e7:a1:77:c9:4e:81:48:af:dd:6e:00:f1:49:69:c1:
                    6d:73:15:e6:b2:be:5f:7c:a9:a2:8e:1c:73:c0:f8:
                    15:05:89:d6:1b:9c:1c:e8:67:bf:13:8f:35:6f:e1:
                    4b:8c:36:fb:80:4a:75:19:a9:27:37:aa:ba:a1:62:
                    b6:5b:b4:90:55:29:da:27:a9:a3:ab:3e:3e:11:dc:
                    ed:15:d0:5b:e3:f7:06:a4:26:3e:ce:56:63:4e:0f:
                    75:55:ef:11:84:06:6c:d0:18:2e:d4:5e:16:e8:67:
                    3a:9b:7c:6b:ca:08:19:8c:51:a6:36:39:4b:cf:d5:
                    6f:db:b7:93:ce:65:af:db:c0:fb:f3:eb:c4:46:47:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:35:60:97:45:5A:E6:3B:C5:EB:54:10:C9:79:C8:55:1C:70:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1752d4a4-f952-3d21-816d-fd4fe3618541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:59:74:5e:4d:7c:6a:75:32:77:0a:36:30:8d:d8:91:08:37:
         fc:26:93:e7:c9:a6:34:16:37:88:34:80:98:e5:c8:32:3b:af:
         0e:a6:c9:bc:6f:e2:63:e5:38:48:e5:c9:7e:99:46:40:c8:84:
         66:3a:35:d9:96:6f:57:bb:d6:0c:ee:de:10:27:21:8b:f1:68:
         b8:c5:be:4f:ac:33:18:b4:9b:65:39:c8:7e:d2:c5:85:3a:f8:
         c8:3d:1d:8b:74:f9:3d:46:cc:7a:0b:9b:cd:d8:34:c0:aa:7c:
         c8:92:4c:9e:62:02:38:83:88:f6:ce:a9:76:93:39:fb:cf:41:
         eb:4e:98:44:30:f4:1c:df:66:70:d2:08:48:73:ec:b0:eb:f3:
         39:af:52:29:0c:14:69:2b:00:4a:a5:52:a5:24:6e:4c:08:9f:
         58:10:21:df:03:9b:61:d8:ee:10:30:de:6c:2a:45:46:f6:a7:
         bd:c1:d4:28:45:b6:89:8c:3b:3b:87:33:f6:db:65:d6:bf:fc:
         8e:05:43:91:1b:62:d0:9a:17:5f:40:b6:d5:04:f1:c9:26:84:
         85:3e:9d:12:58:36:df:9e:3a:b9:98:2e:df:ad:af:96:f4:a5:
         65:c4:5c:36:29:bb:92:95:92:14:95:cb:ce:42:bb:90:67:bd:
         dc:10:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:39 2026 by rpki-client