Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa
File:                     3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa (raw, json)
Hash identifier:          IPeeh40SDXRWhxKaCVC9IHrKRBBYpoNY5M/m3ogZ8I4=
Subject key identifier:   14:59:95:2A:FE:ED:03:B7:E8:CD:EC:75:6B:33:EB:64:88:58:B8:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006326C665F07E23890AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396561
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:32:6c:66:5f:07:e2:38:90:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=077c4838-10be-479c-a693-aff883f09b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:f8:99:59:76:3d:d8:61:84:6c:5b:39:aa:
                    ac:f4:c1:2c:75:05:2d:aa:dd:d3:22:8d:c6:bf:d8:
                    8d:81:4c:e0:fd:dd:d4:59:6c:b1:e3:d4:50:79:d0:
                    ec:d3:00:6c:a0:be:20:ee:7a:05:13:8a:0f:c4:03:
                    4a:29:64:4a:b1:0d:ed:ba:43:ce:e4:19:9a:1d:8d:
                    97:af:a0:5c:6c:b1:90:4f:22:04:a5:8e:59:88:59:
                    1c:db:cd:f9:d6:ed:19:31:c2:ba:d7:1d:69:ed:35:
                    bd:ca:64:98:5b:14:33:01:d1:b0:85:81:5c:1a:f9:
                    82:26:59:94:a4:d3:f4:17:1a:45:46:85:2d:f7:94:
                    de:27:54:bc:03:9c:c8:f1:51:82:17:52:ac:85:9a:
                    4a:79:67:24:c2:19:a9:09:03:1c:b6:72:ee:37:9e:
                    de:c4:bf:5d:b2:4e:d8:b6:19:85:43:6a:65:ba:36:
                    fc:71:78:f6:42:30:37:42:da:e5:7b:3c:8a:ce:a0:
                    b5:8f:c1:11:36:7c:85:1c:ed:79:b6:29:9f:77:1f:
                    a6:35:b9:cf:b2:21:ea:de:15:2b:f8:07:70:0e:89:
                    19:d9:8e:37:c7:a8:b8:19:7f:9c:00:15:11:b3:30:
                    7e:be:9a:f5:05:0e:71:11:fb:e6:2f:70:7d:71:e3:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:59:95:2A:FE:ED:03:B7:E8:CD:EC:75:6B:33:EB:64:88:58:B8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b1:4d:fc:6f:19:83:79:82:2f:87:9b:95:0c:2d:9b:10:87:
         04:09:da:36:3e:37:99:a2:c3:39:2e:5a:f8:b6:7d:a0:df:65:
         da:02:42:ce:20:06:72:9c:fc:df:38:cc:8e:87:1d:1a:b2:ee:
         a2:24:11:9a:96:ac:c1:3f:21:e6:b3:b9:15:8d:d4:91:3e:8c:
         1f:41:df:e2:08:1f:95:15:4f:57:08:70:91:ca:d6:84:d3:95:
         6c:8c:88:25:a2:dd:16:85:ad:2e:cc:15:a9:03:a8:67:5d:cf:
         26:e3:3a:a7:78:d3:e4:0b:17:ea:f0:e6:c7:af:40:bb:58:66:
         b2:9c:dd:4e:e6:0c:1a:e5:d3:f7:18:76:b6:18:18:78:d9:4a:
         4a:c2:bc:78:67:c4:49:28:cc:66:97:e3:e7:77:34:b1:91:6d:
         ad:23:e7:3b:f6:4f:b7:c6:42:09:a7:8c:0c:17:1a:b3:15:c0:
         98:9d:79:13:c6:9e:37:1f:f2:ab:c2:06:50:3f:fe:5b:fe:35:
         d4:3d:06:1e:e0:e4:be:67:ae:1e:a9:13:aa:22:f6:37:8b:08:
         03:8e:d7:a1:25:ab:08:a2:4f:58:1e:bf:9a:21:5a:c3:71:da:
         b9:de:c5:c9:eb:fc:9a:9e:a9:a1:8c:ff:1b:75:4e:af:45:b8:
         5e:a6:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:43 2026 by rpki-client