Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa
File:                     20e17f2e-bf76-3f84-968d-dc8984797231.roa (raw, json)
Hash identifier:          +DAK/duowCTgYDkYZGrppTw9EQb93vN51h7O9iVtymw=
Subject key identifier:   F1:DE:FC:4E:3B:B9:D7:7A:AB:DB:8D:21:58:43:0D:AA:75:99:60:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E22743EB8B4C34DF71F34EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     396564
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:3e:b8:b4:c3:4d:f7:1f:34:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=c5c74f4a-63d9-4b19-a52b-ce5607779d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:7b:3a:7c:b3:75:0c:75:30:29:47:fd:77:
                    a7:69:64:ed:d5:24:3f:9c:ff:29:70:e8:75:98:89:
                    b7:6f:90:dd:1c:b7:38:7d:3e:d7:8c:7c:9f:c1:1f:
                    5d:a3:96:24:de:72:8b:d7:41:a7:72:97:14:53:8f:
                    44:d0:3f:a8:7a:46:11:ca:4d:b7:33:d0:13:31:4b:
                    ef:8c:e9:53:1e:56:59:fc:b7:0a:c5:73:30:26:d6:
                    56:e6:5a:ae:82:e8:b7:6a:09:16:23:7e:aa:81:de:
                    57:8a:d3:16:d6:d9:de:77:26:f8:0a:67:f9:06:9e:
                    a6:ff:f2:48:0a:c6:c4:8e:f0:6a:14:c3:10:ec:85:
                    6a:ca:24:34:f6:2a:77:c5:36:93:2c:28:b1:df:9f:
                    b7:83:f9:63:0e:80:46:56:51:c8:ee:13:1e:a0:4c:
                    1e:cb:8e:c2:a6:1e:b2:d2:e8:45:c7:92:5a:65:47:
                    9d:4f:77:a1:6d:18:d0:3d:77:e2:7d:f4:5a:25:6b:
                    b5:cd:fe:12:3b:24:9e:2f:73:cd:7c:ae:b3:fe:09:
                    e3:09:bb:ac:ef:19:38:c4:8b:b8:0e:c5:5c:6a:3f:
                    70:21:62:b0:39:3c:78:67:63:05:60:2c:26:0c:5f:
                    3d:34:9d:10:ef:bc:39:b4:b6:0d:a2:7e:68:12:f3:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:FC:4E:3B:B9:D7:7A:AB:DB:8D:21:58:43:0D:AA:75:99:60:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:19:76:06:35:e4:27:7c:7f:4e:8d:ad:af:1c:27:14:99:9f:
         fb:c4:47:29:56:0b:75:e2:af:42:d7:9d:7e:45:64:6f:ac:14:
         e4:cc:8e:c2:d6:03:c7:9e:a3:23:20:a0:65:c0:a0:50:1f:4c:
         81:07:1d:32:ef:c2:e1:73:79:6c:fa:6f:bd:f3:81:06:ca:28:
         ea:b6:a4:a7:88:2b:5c:01:88:d8:2e:85:9b:df:25:6f:e1:4f:
         e9:de:d7:e4:24:d9:f1:d3:d0:49:09:de:99:0c:63:ce:69:a1:
         10:7b:a2:99:e3:2c:c0:a9:03:c2:44:7a:bf:50:4e:a8:98:d1:
         2b:df:0d:f1:c5:47:e3:dd:ce:f9:c4:4a:ba:f9:4a:6a:b2:a4:
         53:b8:18:ba:34:18:98:11:2b:19:ef:62:15:99:c6:55:56:e7:
         11:44:9e:30:3f:d9:dc:1e:3c:ab:85:21:8a:7e:da:f5:d7:98:
         c9:77:ba:15:e9:e6:7a:2c:50:98:6a:89:4f:a0:0b:57:52:08:
         fe:b3:2a:6e:18:1f:18:0c:5b:99:dd:c8:04:c4:8e:d9:d7:dc:
         0a:b1:69:62:df:83:36:1a:7b:0c:9b:45:33:2c:91:24:8c:79:
         3a:37:98:64:ff:d6:5b:25:e7:d9:ab:df:a4:f7:29:9b:21:01:
         1c:43:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:22:31 2026 by rpki-client