Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a58b7e1-00c3-32d9-9a84-29e6bd89833f.roa
File:                     2a58b7e1-00c3-32d9-9a84-29e6bd89833f.roa (raw, json)
Hash identifier:          lYNzDrJnDCVPyaR9XX/Vw2JxVYZ2stE2YU2Q20rOWew=
Subject key identifier:   6B:47:DB:FF:92:41:1B:0A:2B:B2:BE:C2:86:22:B0:06:78:BE:0F:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1D7A93BCA0EEE9A347FBAB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a58b7e1-00c3-32d9-9a84-29e6bd89833f.roa
Signing time:             Tue 09 Jun 2026 14:13:56 +0000
ROA not before:           Tue 09 Jun 2026 14:13:56 +0000
ROA not after:            Mon 07 Sep 2026 14:13:56 +0000
asID:                     396602
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:7a:93:bc:a0:ee:e9:a3:47:fb:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 14:13:56 2026 GMT
            Not After : Sep  7 14:13:56 2026 GMT
        Subject: CN=3a3c8d9e-72af-4ea0-8845-1baf5befbb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:28:b7:fa:29:57:7d:61:56:ef:74:ee:ba:
                    c2:b0:26:1f:15:ab:45:7d:f0:e1:e3:6c:4a:7e:45:
                    fc:6c:28:fe:69:f8:96:0b:6e:3d:bd:5c:93:03:57:
                    50:b7:a7:0f:7b:6a:0b:c0:0d:34:cc:4c:ce:29:d6:
                    30:81:20:42:cc:7d:2e:30:21:06:9a:67:eb:74:a7:
                    ed:61:69:a6:83:02:f9:30:6d:4f:6c:f2:b8:49:12:
                    94:a5:c1:63:05:76:cb:09:83:6a:f9:13:ba:90:cc:
                    04:8b:d3:5e:25:2e:d9:d8:59:eb:de:c0:dd:6d:2e:
                    47:e1:d6:fb:cc:4c:a9:4d:b2:d7:4e:93:46:d5:67:
                    59:81:45:b9:b9:ee:0a:a6:c3:74:d1:61:18:2b:66:
                    e9:21:c0:a6:e7:1b:15:1b:b5:e7:67:51:74:84:2a:
                    7a:3d:d4:37:19:fb:76:77:6c:49:e9:3c:05:75:74:
                    95:e9:bc:9b:96:84:8a:1c:23:d1:a0:2d:20:ae:23:
                    3e:1e:8e:70:3d:13:12:29:39:ec:be:44:6b:8c:7e:
                    79:7d:62:3b:19:7e:f7:a8:a8:46:ef:51:22:58:b7:
                    c6:8e:98:93:67:e1:cf:45:e5:3d:b0:0f:fd:46:4d:
                    b6:51:0a:db:2c:f1:b4:84:56:42:19:5d:b0:61:a8:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:DB:FF:92:41:1B:0A:2B:B2:BE:C2:86:22:B0:06:78:BE:0F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a58b7e1-00c3-32d9-9a84-29e6bd89833f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:4c:3e:4c:15:8f:55:99:83:f4:9e:16:72:11:b8:e3:c1:cb:
         93:ed:32:8f:33:18:7b:99:86:c4:25:33:a4:fd:40:90:3f:4e:
         c6:2c:68:ca:be:70:e6:ee:01:27:33:59:2c:de:f4:c2:7f:5e:
         2a:ee:70:73:b4:3c:dd:3f:d8:53:35:15:fe:1a:cd:21:2d:fb:
         43:c4:01:1c:36:c5:26:26:2a:e4:39:e0:a6:9f:9e:91:c1:81:
         d0:3f:fc:f6:0f:3a:d9:a9:c9:13:82:92:12:fb:dd:24:bc:82:
         b4:be:2e:2e:db:88:c4:6f:e1:3d:af:f6:fe:f1:31:b6:cf:cb:
         75:01:83:66:62:7a:16:6c:dd:86:4e:8e:6c:ee:5f:77:cc:df:
         55:05:b9:e4:1b:f9:e1:2a:2b:04:08:57:2e:9a:61:0a:07:3a:
         08:e2:ce:99:c6:75:6a:cc:e1:4e:03:69:3a:80:36:32:88:0a:
         6c:bb:cc:a6:9e:a2:1c:6c:b6:c5:91:5e:5f:42:9e:06:8c:14:
         d3:04:fa:1e:7a:f3:7d:81:3c:98:a8:61:49:7f:f9:1b:2f:9d:
         08:a5:33:8b:2f:e8:5f:f5:7e:8d:18:9c:14:17:16:da:e3:73:
         1d:1a:93:82:df:54:20:ed:08:49:75:5e:5c:c5:26:6b:e6:41:
         96:2b:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:57 2026 by rpki-client