Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa
File:                     2caa4591-ff02-36bf-a82a-f91399c38ea6.roa (raw, json)
Hash identifier:          XlzMlKxrNM3b1O5iyyykPeb9TqHA4JMLIYcUyeftdcQ=
Subject key identifier:   E6:58:77:8C:DC:49:90:55:D8:B8:78:E7:91:AE:D0:A5:0D:5B:53:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C803AB4F51B963E937D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396602
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:80:3a:b4:f5:1b:96:3e:93:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=bbcbb764-fbd2-4fc1-94ae-110304c9160b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:42:68:ba:bc:93:47:9c:8f:37:19:64:90:
                    be:9b:a0:77:a1:0b:67:52:56:cf:cc:63:c2:30:b6:
                    b9:6e:f8:42:10:4d:4d:3e:f9:d0:af:2e:d2:9f:1a:
                    31:ad:69:d8:70:d4:fc:1a:d0:2c:80:c1:6c:86:6f:
                    eb:5e:a0:82:5a:b5:54:f4:44:ce:86:64:48:7d:ff:
                    e8:e4:c2:5c:87:48:8e:48:2e:2d:b6:a0:7e:c0:6b:
                    78:43:e9:e7:7d:ed:23:5f:8b:1d:f5:1f:82:8a:8e:
                    f8:61:c0:f0:42:d8:f1:89:e3:48:1e:eb:59:20:78:
                    5e:82:d4:38:76:71:a1:90:40:7e:0e:30:0d:86:0d:
                    34:2e:e9:e9:5c:d0:cf:92:e2:44:7a:f0:4b:56:f7:
                    82:47:6a:08:14:87:46:30:66:ef:bb:16:60:a0:a1:
                    2d:92:08:66:c5:26:3a:4c:bb:f9:be:ca:97:b4:6a:
                    d6:59:7a:04:38:e5:e3:5f:67:d2:4c:f5:4b:d8:ce:
                    83:3c:10:e7:75:18:02:d7:fc:cc:2f:db:41:f1:5d:
                    3c:a1:0a:14:f3:af:5e:23:68:91:e2:89:e5:28:bf:
                    f3:12:eb:8e:6a:7d:12:48:fa:28:4f:7f:ff:c3:1c:
                    e5:80:94:4b:ce:b1:a4:b2:39:e5:13:37:cb:04:89:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:58:77:8C:DC:49:90:55:D8:B8:78:E7:91:AE:D0:A5:0D:5B:53:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:57:03:7f:62:3d:7f:8c:76:34:f6:b6:50:01:0a:44:af:89:
         af:9f:d8:46:ba:6d:a2:22:0f:eb:32:a6:b5:4e:91:67:f8:e6:
         d2:06:60:e9:bf:2c:23:a6:ad:9b:62:a6:3b:49:aa:f2:b5:aa:
         37:13:1f:0a:2c:2b:53:19:4b:f9:57:0f:a6:d1:ea:5d:3f:b6:
         e0:d9:b1:30:d5:6d:81:5d:9e:5b:eb:b2:fd:a2:a3:32:9e:f6:
         bd:49:60:fb:dd:03:f2:81:28:f6:be:8f:ac:91:36:ca:24:3a:
         b6:78:ac:fc:e5:d0:dc:3c:c1:2a:21:74:3b:3c:30:cb:33:46:
         6f:90:59:df:42:db:9f:f0:a8:0d:e9:55:e1:e9:59:02:9d:42:
         42:73:16:0c:8e:10:d6:91:04:68:23:cc:69:a6:23:ed:d9:2e:
         4a:bb:91:6b:e7:fa:a5:ab:09:5e:e8:36:dc:ff:46:3f:cb:41:
         cb:df:b5:28:b1:76:cf:c2:f1:30:46:24:8a:7a:a0:0b:de:f7:
         12:3f:ba:ea:a0:f4:f1:3a:37:32:5a:1c:3f:31:43:c4:71:91:
         b5:56:71:2c:5f:c5:36:c6:53:b3:8e:db:89:50:03:d4:83:da:
         cd:73:f6:3c:90:c9:6d:d5:8f:9c:47:4e:b8:2f:09:c2:9e:8d:
         b2:61:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:29 2026 by rpki-client