Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63d3fc6f-9458-3349-aa86-a23db7003d68.roa
File:                     63d3fc6f-9458-3349-aa86-a23db7003d68.roa (raw, json)
Hash identifier:          PGWqEA1DkDSWy7Am32fez8HcNjX+XCF0qlneOxrkR0c=
Subject key identifier:   7E:D6:8A:65:02:EA:36:79:8D:4D:D2:C6:19:26:27:1E:99:9E:08:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D091F897A6576A9B62A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63d3fc6f-9458-3349-aa86-a23db7003d68.roa
Signing time:             Thu 14 May 2026 14:07:56 +0000
ROA not before:           Thu 14 May 2026 14:07:56 +0000
ROA not after:            Wed 12 Aug 2026 14:07:56 +0000
asID:                     396583
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d0:91:f8:97:a6:57:6a:9b:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:56 2026 GMT
            Not After : Aug 12 14:07:56 2026 GMT
        Subject: CN=ffd0d044-93b5-4098-acb2-d64f00b4b06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:04:e8:45:e4:78:45:6a:02:ec:4e:7f:d4:
                    b5:4a:2d:66:c8:51:1a:bc:4f:f0:23:75:3e:c1:1a:
                    cc:26:90:6a:67:a3:c7:bb:d3:6e:a5:e0:c1:1d:37:
                    11:d5:89:0a:28:8e:3f:2a:e6:6b:cd:69:11:06:03:
                    67:1c:ec:91:1a:db:6a:ef:6b:47:af:46:68:c5:5e:
                    73:e6:90:42:76:4d:22:70:5e:a1:c2:30:1c:2f:8c:
                    7d:a7:af:34:d9:51:19:69:9a:31:d3:f7:00:e3:76:
                    ea:3a:dc:33:2f:7b:70:d9:96:f3:5c:dc:ca:27:00:
                    4e:aa:c3:9d:b7:10:10:4a:d5:e5:e2:72:fc:dd:ae:
                    0b:2d:21:1a:e3:4d:ea:75:fb:34:3a:46:fc:74:a2:
                    6e:f4:a1:2e:5a:fd:47:06:29:bd:5f:10:59:6b:15:
                    21:8d:9a:73:1e:00:bb:f9:69:d5:5f:43:8a:5d:1b:
                    1e:15:4f:1f:4b:a0:be:cc:53:f1:1a:75:b5:43:cd:
                    db:41:7f:50:88:c6:d2:f4:b4:a0:e9:cb:fa:19:b2:
                    61:78:db:70:e9:60:5b:b3:d9:88:67:61:d6:d7:c3:
                    d2:3c:f6:75:06:03:35:13:c0:88:01:e6:f5:52:2d:
                    84:e9:db:68:57:6e:7e:18:48:ee:3c:95:73:86:ff:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:8A:65:02:EA:36:79:8D:4D:D2:C6:19:26:27:1E:99:9E:08:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63d3fc6f-9458-3349-aa86-a23db7003d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:81:6c:7f:9a:1d:87:5d:d0:99:40:4f:3a:46:2c:ed:91:3b:
         ad:62:7d:1f:5b:d1:7c:90:cc:ea:45:7b:46:ae:d3:bd:a7:50:
         55:7d:52:f2:85:16:56:9d:47:a6:2a:5e:bd:de:8a:9f:e7:61:
         32:ad:0c:f9:0e:e0:1c:da:2f:cd:15:fe:05:6a:7e:2e:ac:85:
         c0:10:dd:d4:62:37:6f:3f:0b:de:9b:c4:99:40:08:de:b6:df:
         48:66:93:af:11:7a:25:01:2a:8d:b1:f2:7e:cd:b9:63:6e:92:
         9c:66:e0:bf:ae:33:eb:a6:bb:0a:14:20:6f:50:24:97:5d:40:
         4c:70:92:db:e7:53:f7:1a:d2:e4:6a:aa:a8:6d:dc:5d:75:79:
         ee:ba:ef:74:d4:ca:79:fb:ef:87:b9:b8:25:7e:ce:07:46:a9:
         a1:48:9d:7a:87:e8:3f:e2:8f:71:23:60:33:97:38:70:59:7c:
         db:a5:c8:3b:50:73:88:ee:cd:ba:28:a4:2b:91:88:e6:43:bc:
         b2:40:50:cc:3d:86:91:f9:21:1a:f1:a8:45:91:ad:fb:ed:82:
         02:6b:b8:e8:3f:eb:bd:24:3f:dd:cb:be:49:8d:98:07:0f:56:
         57:f5:44:bf:05:df:2e:8e:0c:86:b4:90:e4:09:4e:a0:af:ac:
         b1:d5:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:09 2026 by rpki-client