Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5415e731-e715-3d2f-9f1a-a1ff4c63bda5.roa
File:                     5415e731-e715-3d2f-9f1a-a1ff4c63bda5.roa (raw, json)
Hash identifier:          1VJxtwdcZtdWhEusnXoLpQNb08nI7CfUumkrSDDZJYs=
Subject key identifier:   8A:73:52:04:B7:D6:CB:E3:71:DE:FE:0D:EF:A0:CD:6F:F6:5D:A1:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B45F028FBF9F4FC7CF380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5415e731-e715-3d2f-9f1a-a1ff4c63bda5.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396582
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:45:f0:28:fb:f9:f4:fc:7c:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=541bcc06-f8bb-447c-8e97-6954fe75a0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:d5:d8:a4:1b:07:0d:d6:01:a6:31:ad:e3:
                    66:85:4b:45:75:9a:42:62:fc:06:b8:c4:b0:35:15:
                    47:d2:84:4f:70:8d:6f:b1:e3:16:db:d7:57:9e:ca:
                    32:19:cf:15:f9:df:a6:17:8d:f2:54:eb:05:15:a1:
                    2d:43:cd:0a:d6:a4:45:ec:cc:36:c8:67:0e:47:56:
                    5e:10:dd:a5:73:b0:20:38:d2:85:3e:eb:8b:75:00:
                    9c:47:18:77:18:3a:b8:70:72:9d:71:3f:40:25:43:
                    01:a3:3d:36:f2:58:34:8d:ae:82:a1:1b:ac:c4:d6:
                    39:5a:ef:f5:77:5f:9c:2a:a5:05:3d:71:03:54:cc:
                    1c:fd:9f:45:2a:01:8e:85:46:fb:c8:a3:3f:2d:2e:
                    32:6d:45:82:b6:d4:6c:03:b9:99:3f:2d:f7:89:71:
                    29:2c:f0:b8:ce:d2:7f:62:a1:c5:b1:62:d7:98:f2:
                    86:b8:87:65:6e:c7:6a:fc:30:94:8c:24:42:d8:fc:
                    da:ce:5b:92:ea:41:d2:d5:02:37:a7:5e:f6:08:4d:
                    d7:1f:fc:35:ed:43:4f:a9:fa:6d:10:03:78:c9:ec:
                    0e:be:a1:1d:b6:1b:8e:68:ab:37:fa:b5:d7:a1:92:
                    f1:b4:4a:ef:08:96:4a:f3:22:3f:43:cc:33:c4:ec:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:52:04:B7:D6:CB:E3:71:DE:FE:0D:EF:A0:CD:6F:F6:5D:A1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5415e731-e715-3d2f-9f1a-a1ff4c63bda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:18:3a:c1:83:9b:8b:d5:0b:5e:04:b3:fb:24:57:7a:43:
         aa:28:f8:2b:9a:6a:6a:ba:41:58:fc:a0:8d:b7:97:ac:cf:74:
         dc:2b:d9:5a:1e:d2:1a:99:35:d2:f8:a7:c0:11:9b:e4:44:f2:
         98:eb:4b:b4:fa:bd:a4:d6:96:4f:07:37:ac:6d:5f:1a:87:88:
         ca:cf:7d:65:17:c2:ff:fd:28:e4:1c:a0:7e:95:09:4c:de:77:
         4b:d3:35:e6:28:e5:cd:90:75:0a:a1:2a:f9:65:74:e3:d7:82:
         ab:1d:d5:c5:20:46:f4:7b:49:ab:22:f2:8e:44:02:5c:db:24:
         02:ef:da:2c:21:cb:02:f0:d5:77:ff:98:67:d0:f0:7f:f2:61:
         06:1a:0e:32:e9:bd:48:00:ea:c5:81:df:56:e3:bb:75:72:1c:
         d2:9d:cb:da:13:01:b2:27:25:c7:98:3f:2a:13:a6:d0:81:4b:
         7c:1b:f2:3d:e3:1d:6a:7a:bc:ca:10:40:2a:9d:29:71:8b:fa:
         dd:f6:fc:53:d6:85:12:08:65:f8:c4:74:38:23:92:22:0e:04:
         7c:64:47:d4:fb:fa:43:a0:b7:70:dd:eb:27:70:dc:f2:13:46:
         94:e3:52:7d:a8:aa:c3:c0:10:a4:b2:7f:92:06:9a:60:47:fa:
         21:62:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:20 2026 by rpki-client