Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa
File:                     52263be1-da0a-385d-8bf1-b381eb1b2591.roa (raw, json)
Hash identifier:          soVWXPZugriBL+4oyybdheLNVqK6tpQ/f11r154XpY4=
Subject key identifier:   85:AD:A7:6B:6C:F6:76:D6:0F:9F:D9:A4:B1:A2:71:D8:64:58:D6:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E07009DFDCC5A3587C4045D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     397212
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9d:fd:cc:5a:35:87:c4:04:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=54b7e2b3-31e2-44fa-8f7d-1d479c2fbe48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:76:97:08:d6:46:f2:72:a5:40:a9:71:e7:
                    82:5b:bd:5a:85:ad:2d:b3:1a:bd:8f:1e:4d:59:87:
                    88:2a:0e:35:ee:29:b7:62:e9:b7:8b:7a:61:fd:8f:
                    39:6d:04:21:30:aa:8b:56:f4:63:90:d6:0d:c6:c3:
                    3c:a7:5e:d3:70:bb:08:35:10:17:4c:d6:78:77:82:
                    77:8d:d8:9f:4d:26:24:ef:cf:5e:9b:45:4b:4c:a4:
                    6c:8f:57:0a:f4:31:76:36:1f:39:ee:74:ed:23:df:
                    18:27:30:60:ab:28:ea:20:bf:c4:34:1a:07:ca:fe:
                    85:f2:00:88:11:8b:7d:02:45:66:46:d7:3e:a9:8a:
                    8f:9e:93:ed:8d:c7:c9:85:70:11:1e:64:53:44:48:
                    0c:2d:09:2b:f9:90:a4:89:b3:64:ee:d0:df:7b:20:
                    99:7a:43:29:0b:9e:fe:2f:fe:d2:be:ca:1f:1c:6e:
                    e6:38:6c:2c:4f:8a:c7:93:bf:46:f7:0c:33:27:c4:
                    aa:3a:3a:1c:80:83:29:21:00:8d:98:b4:8c:93:4e:
                    d9:bc:3e:bf:8f:ee:c6:d2:80:57:a5:e3:79:fb:ad:
                    0b:95:87:e4:8c:da:1a:50:b7:2c:e9:ad:e8:1a:59:
                    ff:b0:98:55:c1:74:ba:5b:01:ea:4b:aa:a8:a5:11:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AD:A7:6B:6C:F6:76:D6:0F:9F:D9:A4:B1:A2:71:D8:64:58:D6:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52263be1-da0a-385d-8bf1-b381eb1b2591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:44:ac:4d:d1:22:78:3a:25:1b:9e:5c:4a:6c:42:18:de:
         34:b6:9b:f0:42:e9:f4:a0:b8:30:d4:bc:07:3b:10:2c:5d:79:
         a0:9c:6e:f4:d0:c7:e8:36:ea:3b:dd:86:b3:21:ac:66:80:a5:
         9b:ed:31:1b:4c:d0:30:c8:8e:b0:d8:a1:a9:a1:70:e6:c6:69:
         33:9a:92:c1:16:38:33:69:04:d9:b3:d3:56:be:0e:2a:53:cf:
         2c:91:0b:74:c3:cc:f8:3c:53:e0:d3:72:bb:6c:84:d0:cb:05:
         58:1f:ee:d2:90:51:72:c4:4c:99:bd:6c:d9:1c:82:6d:a1:1a:
         b5:04:77:d2:b0:ad:97:eb:26:04:89:5c:7e:c7:00:6f:af:86:
         e4:f6:7d:f9:cc:9d:e5:81:e2:79:54:77:c4:25:45:6d:f5:ba:
         99:cf:45:1d:ce:7f:31:c7:d6:15:34:35:9f:f5:ea:91:9e:af:
         6f:5a:eb:08:4e:25:29:f5:8e:ca:91:ff:98:94:06:ce:bd:32:
         13:4b:ee:e5:3f:31:16:f6:50:2b:bc:b6:4c:fb:d3:87:8a:c9:
         55:39:fd:41:8c:bb:e0:d4:70:77:1a:b2:90:91:af:06:9a:a9:
         cc:ad:70:15:f5:96:12:db:eb:b9:40:33:2e:6e:82:11:92:fd:
         58:1a:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:35 2026 by rpki-client