Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5fc28b-f1bb-383c-a4b4-3f6d4412b2ca.roa
File:                     3a5fc28b-f1bb-383c-a4b4-3f6d4412b2ca.roa (raw, json)
Hash identifier:          CqT6Tj3xjfoVvZmbjE0PT+ZEvuxZcD5ukfk7AQ0w5Jc=
Subject key identifier:   4E:26:37:9A:D3:6E:F5:6D:6B:11:DF:B8:B1:FE:6E:8F:36:A7:07:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00062F85B95A060C8FCD2800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5fc28b-f1bb-383c-a4b4-3f6d4412b2ca.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396610
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:2f:85:b9:5a:06:0c:8f:cd:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5f902b64-33a9-4bfa-ac83-356b887651dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:95:0f:bd:c8:40:4c:4c:cc:ce:99:dd:43:
                    b7:1e:89:5c:05:7a:39:70:c7:27:ae:ff:78:ef:d2:
                    b7:90:91:36:ec:52:ba:55:2a:d8:03:5b:0f:bc:a4:
                    d8:98:93:fd:05:d4:da:9c:dd:b3:b2:b8:09:7d:b7:
                    10:b4:cc:94:98:e0:52:2c:c4:80:a8:0d:56:f8:77:
                    eb:42:f3:04:de:81:0f:ce:d1:31:60:70:7c:e4:26:
                    60:11:87:a2:9c:f7:7a:fd:66:f8:78:6f:89:ee:d7:
                    b2:6a:ba:87:a4:3c:75:50:6c:6b:41:0e:5c:df:5c:
                    95:51:dd:8b:82:ee:29:cf:e3:6e:c0:06:12:75:cc:
                    6a:6e:d8:64:54:ac:bc:c6:7c:1e:4a:50:a9:eb:0b:
                    93:f2:08:e2:71:15:58:3a:d4:3c:a0:18:e6:bb:dd:
                    5a:b4:08:61:20:1f:88:28:03:a5:46:7e:d3:aa:f3:
                    89:b2:49:0a:19:f9:7a:96:91:b9:b1:66:b3:17:a1:
                    c7:5d:de:0a:f1:dd:8e:00:8d:5b:df:a4:6d:75:1b:
                    59:85:fe:c6:65:42:d5:9c:f4:43:a1:80:d2:79:eb:
                    b7:65:19:35:b0:f6:2b:6a:e3:c8:bc:c1:de:cf:60:
                    27:7d:44:32:9f:e2:19:f4:2f:cd:44:90:de:2c:25:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:26:37:9A:D3:6E:F5:6D:6B:11:DF:B8:B1:FE:6E:8F:36:A7:07:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5fc28b-f1bb-383c-a4b4-3f6d4412b2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:44:42:20:43:74:fa:d7:62:37:db:55:56:c8:ef:8b:f8:a9:
         44:41:06:7c:20:81:2e:35:0a:fd:c9:79:82:32:a8:63:f2:34:
         b2:c0:3d:4d:3f:e2:0c:31:ab:9a:f5:f5:55:7f:61:48:19:e8:
         c3:be:6d:69:50:41:35:d4:38:73:e8:c9:65:38:e2:6a:83:f4:
         e8:2d:f0:1c:ea:76:c6:e2:a4:6f:f4:a7:f3:22:e3:50:7b:21:
         8d:b3:64:06:58:6d:f4:60:17:c3:ec:11:91:d9:c7:f4:a5:58:
         85:0f:af:41:07:15:e8:d4:e9:92:3c:e7:18:61:6c:36:c8:f6:
         81:46:16:84:47:37:be:00:f1:55:da:95:57:e7:14:7c:a9:63:
         20:d6:1a:00:3e:9b:a2:3c:9d:72:24:ab:6d:cd:15:9a:26:58:
         19:58:50:15:94:0b:04:4f:4b:50:61:66:53:f0:27:db:b0:f2:
         3a:68:84:d6:fe:23:fd:51:95:6e:45:41:c1:ab:59:64:e5:a4:
         f9:9d:9d:f4:1a:af:01:7a:92:06:9f:f1:a1:28:cb:30:24:cc:
         8b:bd:de:8b:aa:06:6b:1d:c9:fb:ff:73:21:48:75:1f:e1:5f:
         4c:6b:27:94:8b:1d:63:b9:5f:e5:dc:d6:cd:5a:78:02:ab:d6:
         23:a2:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:26:23 2026 by rpki-client