Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa
File:                     18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa (raw, json)
Hash identifier:          CaQWxtEKls+ZFg+QviMujPG8h1ua/EE71nm4TFhDzts=
Subject key identifier:   FB:FB:5A:18:FD:52:44:1B:E3:E4:13:E7:2E:66:FF:9F:73:A5:CC:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0700954A56AC76D16328D680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     36620
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:95:4a:56:ac:76:d1:63:28:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=6c117245-5b84-422b-85a2-925b34e07bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:d0:e5:0c:7a:62:01:b4:b2:2e:16:9e:ea:
                    82:a9:d0:59:8f:0d:4e:4e:22:a4:ce:fe:09:34:a2:
                    6c:de:8f:07:41:68:70:81:d2:a1:4d:8e:77:4f:a7:
                    83:07:35:55:b2:d8:f7:c7:9f:b9:6b:60:68:41:fd:
                    1f:1c:87:d7:71:3e:dd:d8:03:63:f2:2b:20:e1:0a:
                    cd:9d:1f:3c:d7:67:b6:f4:aa:93:ef:6a:f3:80:3c:
                    34:2c:a7:a7:cf:79:53:15:05:5d:08:24:5a:19:7c:
                    e8:22:3f:32:b4:cd:52:ee:19:00:1d:db:68:fb:0b:
                    73:79:86:ea:41:f6:ee:24:88:16:af:d2:76:0a:ce:
                    16:2a:c3:54:bc:67:8a:1b:25:bc:ca:4a:24:52:d0:
                    41:60:fd:01:8b:70:d3:30:f6:48:72:56:c1:6f:7e:
                    8f:84:e0:72:54:23:83:c3:0e:03:88:db:43:61:c8:
                    4e:7b:fe:e4:7c:8e:32:32:0f:a7:88:8b:f3:74:27:
                    ac:aa:22:2e:e2:64:a3:e1:4b:79:fa:2f:9f:04:56:
                    2d:11:ae:cd:a8:ad:8b:eb:98:5e:22:85:c3:9f:35:
                    50:2c:cf:d7:27:83:f3:bc:7b:f9:55:c1:89:23:a2:
                    ef:78:67:0e:be:e9:42:ec:13:1c:af:f5:2a:d2:96:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:5A:18:FD:52:44:1B:E3:E4:13:E7:2E:66:FF:9F:73:A5:CC:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:5b:6b:9b:38:d8:d8:90:55:11:26:fe:6f:41:74:92:5a:
         7f:34:38:eb:06:1c:9b:b0:69:55:f1:21:c0:d2:09:78:bf:ac:
         25:67:4a:cd:b7:9a:2b:be:78:33:0a:76:be:f3:67:8d:93:31:
         91:1e:9e:b4:53:8c:3c:eb:90:c9:93:2c:4d:ba:80:93:51:2b:
         10:60:65:d5:a0:78:89:5d:9f:c7:7b:3d:da:fd:33:cf:f2:ac:
         16:b2:9e:19:fd:d0:6d:71:3b:15:2f:9e:87:93:0b:a8:7e:30:
         2c:67:9c:b1:a4:d9:54:ba:2f:12:6c:4f:92:d6:3a:48:31:f2:
         b5:c3:51:81:b7:fc:60:2b:c1:64:ef:10:92:7e:5b:b4:37:4d:
         fc:57:bf:8f:7b:ff:cd:bf:13:fe:05:9c:22:cd:83:d0:5e:99:
         7d:70:6f:eb:fe:1a:6f:8c:09:49:58:b7:a5:35:a1:e9:3b:cd:
         76:34:e2:46:77:45:e7:30:3f:3d:00:62:b1:65:b0:bd:51:0d:
         c2:e6:b1:ff:0e:2c:ce:34:48:bf:60:9f:b9:3b:c1:64:65:a1:
         4d:75:ca:fe:3d:00:6e:f1:dd:c4:9c:19:55:16:76:73:f8:37:
         89:67:31:d5:90:e6:71:26:2c:68:a5:fb:d5:15:24:cf:8d:7b:
         0b:cf:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:19 2026 by rpki-client