Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa
File:                     2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa (raw, json)
Hash identifier:          aR1DbM65UJOuVpEtYWxUlvmeg3jc2XUFjBcgnRSlJcw=
Subject key identifier:   AA:1D:04:C7:CE:66:78:3A:D4:81:47:25:AC:45:81:91:48:98:E9:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E070082FCF4415BD00F1A0100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396541
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:82:fc:f4:41:5b:d0:0f:1a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=04bed4b8-8316-4a15-a357-d7e30c2d482d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:91:06:a9:c3:90:1e:92:78:4b:d4:a2:d0:
                    3a:15:c7:d8:14:f7:1e:08:20:dd:a6:3a:33:98:50:
                    6a:61:8d:f1:36:02:ba:c2:62:0c:fe:a3:2b:84:85:
                    65:8e:02:97:1d:d2:a9:70:b6:9a:b7:bc:10:3e:58:
                    ad:c4:9a:d1:e2:00:ed:32:a5:09:cd:b4:97:ac:89:
                    0c:1e:f7:e8:6e:b9:51:00:29:5b:63:3a:aa:a6:5b:
                    2a:23:c8:41:5c:29:8c:e6:a2:4a:c0:9e:ce:c8:d8:
                    b5:30:3b:65:cd:fd:c7:c4:40:9e:d7:59:4b:6d:62:
                    82:93:cd:81:8f:1c:c5:18:03:f1:91:90:60:9c:e5:
                    58:3a:1a:94:cb:a0:26:a9:e0:90:ec:c7:0e:6e:bd:
                    d1:bf:89:84:c0:d0:25:11:e1:b2:7f:65:96:ee:32:
                    61:a4:c3:bd:a4:b5:a6:cf:1b:fb:5f:e3:e4:6e:f8:
                    97:a1:bf:ca:aa:95:40:b3:c3:62:f0:cd:23:51:59:
                    37:64:6e:57:1e:6c:60:27:75:16:88:b6:04:8e:0d:
                    c1:62:80:ff:b1:a6:4e:11:e7:19:ad:32:38:40:44:
                    e3:5b:07:73:d7:dc:a9:7d:5c:1c:de:91:bb:77:c1:
                    60:4c:4c:f4:9e:a9:4b:ef:52:05:86:5a:a2:5f:51:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1D:04:C7:CE:66:78:3A:D4:81:47:25:AC:45:81:91:48:98:E9:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:66:4b:86:9f:33:82:3e:aa:12:e8:33:34:7c:0b:c7:02:72:
         8e:ec:48:a6:52:c9:e1:b3:76:6d:12:96:ab:15:5d:00:9e:9a:
         cf:90:a6:de:3c:fa:f7:86:39:37:0f:f2:41:c6:f0:5d:49:08:
         3e:b2:ea:32:9d:96:63:18:31:f1:f2:be:37:a7:30:0b:c4:3d:
         05:b4:ed:81:e3:31:1d:be:0f:e1:b2:00:9a:87:a9:f7:0b:8c:
         9b:45:46:a9:3d:d7:bb:5d:24:5d:c8:4e:44:e5:5f:a6:18:c1:
         21:67:97:5b:ef:af:28:db:e0:1c:26:fa:dc:95:b9:d3:ca:10:
         66:6d:be:d5:c4:39:af:0a:b0:8e:59:2a:91:d8:a1:09:ec:9e:
         e8:cc:58:88:72:bd:7d:4e:d7:7d:eb:26:32:31:66:51:32:2d:
         4b:4f:25:ae:59:02:92:93:78:66:55:d5:b0:75:42:29:59:83:
         77:65:f7:0e:1a:99:ef:40:55:b3:ca:12:d7:14:75:42:0a:ca:
         88:d9:98:47:0d:9d:4f:c7:01:ab:49:18:9e:39:ba:ee:3c:1d:
         e6:c9:9c:19:6d:03:9f:4f:63:8a:60:83:69:68:3a:9e:24:a0:
         84:55:6d:f3:21:2b:59:35:41:52:c9:ef:0b:dc:fd:a0:59:e2:
         c9:d1:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:29 2026 by rpki-client