Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa
File:                     3299eba7-5501-3052-a8c3-1e1e326229a6.roa (raw, json)
Hash identifier:          4621eOFWySRSyQ/yO05JBfTZKVjzJJ6jAyxRArREkTE=
Subject key identifier:   20:69:D6:6F:82:73:CC:8D:FB:D5:06:E8:44:0B:11:2D:0E:10:8C:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C819ED54ACA6B2DAD0B60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396565
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:81:9e:d5:4a:ca:6b:2d:ad:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b2ad8bba-84bc-4855-9581-f43626040339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:8f:b8:fe:29:2b:03:6c:4c:7c:e8:fc:c0:
                    4d:b3:17:e2:c2:73:d8:c0:5b:d8:ef:cc:35:67:33:
                    97:fb:9b:70:80:45:77:ed:ef:c7:a9:d9:5d:69:0b:
                    bb:6d:fc:5e:ec:b3:7b:9b:61:c3:49:79:9e:50:46:
                    8e:58:46:43:07:e5:06:a0:48:fd:94:ef:70:56:2b:
                    64:1b:36:fe:ce:7c:22:c8:ab:50:d5:aa:98:58:df:
                    90:63:af:13:ee:b9:83:0a:cf:17:db:41:fb:6f:28:
                    39:4e:7a:57:91:c6:ec:60:7f:cb:06:4b:80:39:15:
                    78:f6:ac:59:e1:b1:b1:3e:ca:46:a5:bd:e5:70:9d:
                    d8:4c:43:66:35:2d:94:bd:54:ca:45:ba:0b:0d:0f:
                    eb:8d:d4:22:12:d2:30:fe:50:6c:23:e9:6e:95:f7:
                    57:a7:54:be:4f:7f:7c:c2:e7:56:a5:c2:5d:48:f7:
                    5d:3d:bd:ba:d0:ad:e1:ff:61:ed:a2:bc:ea:58:17:
                    b3:1a:58:8c:f1:1d:1e:97:bc:66:31:72:82:19:2f:
                    86:7e:64:69:c8:4a:3e:6d:0b:f8:da:b0:34:b4:c2:
                    b5:38:9a:f4:61:ba:4f:1a:11:f0:01:a7:40:15:db:
                    53:79:ca:9b:51:28:cb:91:44:6b:8a:14:c4:48:2a:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:D6:6F:82:73:CC:8D:FB:D5:06:E8:44:0B:11:2D:0E:10:8C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1f:d6:a4:3a:34:7c:57:36:78:96:aa:41:ac:d4:6a:23:1a:
         6d:0d:fe:35:e7:a9:3f:b6:d5:d0:df:be:59:f2:fe:a5:aa:e7:
         d9:f5:73:c8:c7:55:aa:0a:3e:a2:c5:01:d9:7b:64:e1:31:92:
         f3:c6:8e:ba:c8:ac:04:f7:ac:a3:84:8e:19:7f:cf:f3:45:63:
         8e:06:67:f4:15:a9:12:ef:b0:c8:61:82:0e:03:b7:48:5a:9e:
         06:aa:a8:a1:cf:1b:d5:66:88:78:6b:5d:7a:a1:12:06:10:4c:
         77:ad:e4:e3:d6:1b:1b:a8:2e:13:f1:91:cd:53:f8:75:ff:a0:
         32:8b:d2:c5:75:f4:86:af:28:f9:a2:a2:fa:8c:8f:c2:d3:f3:
         05:f9:17:1e:1c:d5:3e:76:ce:87:38:ad:74:8c:6e:84:0f:ef:
         72:ef:e8:ae:aa:57:04:2c:a2:c2:93:a4:a2:8f:39:4a:f8:d3:
         e4:f5:1a:08:a0:79:b1:e2:a3:14:9f:40:61:3e:86:88:98:21:
         3b:b0:4e:e3:76:fa:0d:69:b2:94:7c:36:d2:33:a6:62:7a:a7:
         53:c0:4c:c8:2d:7b:5f:e4:7b:12:d2:43:72:3f:03:73:31:5b:
         a4:af:52:76:0f:1f:07:17:2c:85:87:3c:63:f7:67:2c:ad:c6:
         77:b0:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:26 2026 by rpki-client