Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51431fa2-4e98-37db-9fca-930d5764df4b.roa
File:                     51431fa2-4e98-37db-9fca-930d5764df4b.roa (raw, json)
Hash identifier:          AYD+smA0vZl8brAZs/JP4U0DEgzB7/0/qscW56iTp3E=
Subject key identifier:   CB:AC:9B:3B:CD:1A:BE:74:5E:6F:EC:BD:02:EC:0D:7D:90:19:AD:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1D7A930F2ECCD2BBFF73AE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51431fa2-4e98-37db-9fca-930d5764df4b.roa
Signing time:             Tue 09 Jun 2026 14:13:56 +0000
ROA not before:           Tue 09 Jun 2026 14:13:56 +0000
ROA not after:            Mon 07 Sep 2026 14:13:56 +0000
asID:                     396597
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:7a:93:0f:2e:cc:d2:bb:ff:73:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 14:13:56 2026 GMT
            Not After : Sep  7 14:13:56 2026 GMT
        Subject: CN=d8465f92-9667-43de-b8e9-2bbf94d2c55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:fb:80:1b:5c:29:48:85:a8:9e:77:7c:e0:
                    ee:bc:53:a3:27:72:a2:92:5d:a2:bb:f2:bf:51:2e:
                    ab:12:01:f5:16:3f:52:a0:b4:0f:5d:10:bb:f4:d2:
                    cd:aa:ad:cb:2f:2d:81:02:b4:da:2b:26:b6:53:cd:
                    1c:a5:55:a9:13:02:59:f9:1a:1c:be:2d:64:0a:ff:
                    c7:94:04:fb:c0:7b:9c:0a:90:0c:29:1a:05:c3:59:
                    20:ca:bb:ad:28:0d:40:b2:54:89:dc:6a:e0:1f:36:
                    86:af:79:41:88:81:e6:97:f8:ca:ea:a5:e9:e9:2b:
                    87:74:28:09:b7:1d:1e:54:e4:4f:90:73:c2:66:98:
                    31:12:b0:36:d6:75:37:89:23:8b:81:c1:f3:a8:46:
                    e9:6d:bb:93:cf:18:0c:ff:61:b3:61:45:66:78:d6:
                    72:e7:0e:b3:d0:7f:ea:bd:1c:e5:65:76:b9:6a:93:
                    b0:e5:00:f5:e9:7b:84:14:75:e7:2e:c2:43:f6:47:
                    97:26:f1:06:ab:fb:b9:b9:c4:da:75:bc:01:5b:f3:
                    8f:3e:3f:0c:8e:a0:04:d5:02:6d:8a:db:92:25:2c:
                    81:ca:b6:35:84:36:33:b6:80:0d:8d:a6:f9:09:d0:
                    be:8a:38:9c:91:28:ad:48:bb:2d:ac:1f:0e:d9:99:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:9B:3B:CD:1A:BE:74:5E:6F:EC:BD:02:EC:0D:7D:90:19:AD:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51431fa2-4e98-37db-9fca-930d5764df4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:f5:01:e9:67:cb:0e:8f:c9:b0:24:e7:80:e1:6a:2c:e2:
         76:e8:6d:d1:c8:8a:0b:bb:c2:76:20:06:02:57:28:01:1d:f1:
         c2:75:2c:c2:0d:8e:2a:73:3b:e2:57:97:19:6c:a5:f7:81:ea:
         28:5e:d9:d4:dd:67:a0:42:7e:04:ef:1f:d2:7e:71:1b:73:61:
         31:9f:56:5a:b3:d9:21:22:78:36:32:5c:66:1f:42:c9:f0:8c:
         51:58:d5:74:59:b6:a6:cf:a2:90:d8:b9:58:fd:12:1a:ae:c5:
         89:e4:5c:f1:e8:33:f1:16:69:68:04:36:9c:f4:9b:80:b1:e7:
         16:73:a4:60:d2:1b:22:c3:1e:fe:41:39:a7:6c:35:db:00:ee:
         d8:c8:8f:62:fc:76:de:03:be:39:65:06:77:b2:70:13:8e:51:
         dc:64:30:e5:e4:73:5f:b2:0b:06:9c:95:33:3e:27:82:09:3f:
         78:75:83:33:14:c8:8c:cc:da:ae:c9:df:f8:03:54:ba:af:a1:
         33:52:4f:6f:c1:0c:13:10:47:8a:02:7c:eb:02:f6:72:b9:c4:
         97:95:46:58:ab:05:b6:91:4e:3c:eb:4f:ab:35:4c:8a:83:92:
         b3:6b:51:9d:43:5d:32:4f:f5:6c:8e:99:7c:e4:75:85:95:cf:
         17:76:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:25 2026 by rpki-client