Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250f9087-56d9-343f-af2b-1c8a84fcd035.roa
File:                     250f9087-56d9-343f-af2b-1c8a84fcd035.roa (raw, json)
Hash identifier:          rMTtMggiXAum772PM4Y/Bws67EkL3+zozn9FV80TLT8=
Subject key identifier:   E7:8A:95:5E:75:57:80:FF:2F:63:18:A9:F6:15:D0:82:71:5B:2A:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006305BD5C3CBC29B460700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250f9087-56d9-343f-af2b-1c8a84fcd035.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396592
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:30:5b:d5:c3:cb:c2:9b:46:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=78b01659-2e64-49f9-93eb-bda72869d63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:b8:52:c0:c6:34:3a:a7:c0:73:b3:f4:4e:
                    82:da:53:84:51:ce:43:06:14:48:31:1f:e3:dc:f6:
                    2f:b5:fd:30:e7:9a:75:57:62:fe:43:02:62:42:d0:
                    d2:3f:bc:7c:18:28:68:90:4e:2a:13:de:9d:44:93:
                    61:d1:00:c9:68:7c:f1:8e:ca:a4:16:f4:61:86:4b:
                    89:bb:82:8d:2e:b5:bb:60:dd:51:e2:c7:ba:ba:b8:
                    da:e8:57:57:ad:f9:b1:47:02:33:41:7b:26:21:48:
                    f3:ab:b3:25:b7:3f:48:7a:31:af:82:65:f2:47:03:
                    1c:d7:5a:f5:5b:ba:f9:1e:5f:c6:32:93:b4:5c:5b:
                    79:fe:b2:b8:3b:0d:49:7d:00:b9:5d:66:eb:b3:0c:
                    a9:9d:9a:a8:6b:1a:e5:cb:3c:33:17:12:e0:a0:a4:
                    56:e0:84:d0:75:a4:58:86:6d:c5:1a:c0:f6:92:e1:
                    ca:65:70:81:51:e7:3b:f2:bf:a0:53:a9:10:a2:6e:
                    88:5f:42:65:1d:91:b0:10:34:e6:72:f7:b9:65:b5:
                    de:ae:5f:84:e7:ab:5e:66:2e:a0:dd:7c:88:56:11:
                    22:c0:b7:75:b9:29:9c:ae:0a:bd:21:01:76:fa:c6:
                    4a:a9:9d:ca:0f:77:87:37:0b:85:a0:9e:83:19:94:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:95:5E:75:57:80:FF:2F:63:18:A9:F6:15:D0:82:71:5B:2A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250f9087-56d9-343f-af2b-1c8a84fcd035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:14:c0:26:3f:3e:89:12:92:71:dc:0e:21:63:dc:18:da:82:
         75:72:7c:da:b2:9d:26:75:ac:18:e4:a4:ad:3e:e7:51:02:57:
         2a:10:ef:6c:f1:44:c1:74:8c:70:cb:96:df:f6:b3:d6:1d:be:
         2a:5a:5d:f5:95:92:54:8d:88:62:50:43:63:bc:42:f7:f9:4d:
         28:26:7d:93:65:c2:de:37:49:46:a9:36:0f:73:c9:78:d6:cd:
         64:86:72:73:39:f8:98:85:cd:c4:93:e7:dc:f9:f6:14:9f:ef:
         bb:39:4a:45:05:d6:d5:97:f0:e7:e5:6e:a9:2c:5e:59:c3:d3:
         54:35:63:e1:21:6a:fb:de:64:bf:79:61:39:b1:bc:09:94:02:
         67:c5:b7:20:29:5b:81:d2:32:9b:91:93:03:d6:6d:f4:98:48:
         99:f1:f6:fe:ef:c6:47:d6:a1:b6:9e:ad:11:8a:4b:31:50:5d:
         ab:16:4b:75:63:6b:51:8d:29:aa:69:6e:ea:af:5d:c6:a7:d4:
         d0:76:9f:23:2b:3e:35:d4:8c:21:d8:09:59:0b:fa:35:10:94:
         dc:2e:e6:af:5d:99:1e:77:81:f8:e2:48:d4:dd:6a:ad:f6:3a:
         63:a9:3d:9f:10:b5:46:25:05:20:9e:38:7a:be:4e:15:22:59:
         16:39:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:36:59 2026 by rpki-client