Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa
File:                     6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa (raw, json)
Hash identifier:          bEm5tvCyDifzV7M7HwoTBTCsXvUhnQZIQpfmjLT4J+0=
Subject key identifier:   D8:08:0B:09:FA:A1:2C:0A:8B:73:3D:8B:1D:76:A8:8F:60:1F:88:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81285E4B14935578FF45E880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa
Signing time:             Tue 14 Apr 2026 14:22:11 +0000
ROA not before:           Tue 14 Apr 2026 14:22:11 +0000
ROA not after:            Mon 13 Jul 2026 14:22:11 +0000
asID:                     396560
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:5e:4b:14:93:55:78:ff:45:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:11 2026 GMT
            Not After : Jul 13 14:22:11 2026 GMT
        Subject: CN=d3c591b8-f63a-49b8-8b02-a30b6c6ee6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:e7:30:35:0e:e4:42:13:55:a1:c9:32:a5:
                    6d:82:a8:6e:e7:c8:d0:98:8c:c1:67:82:1b:3c:41:
                    0a:1f:47:85:d1:c7:69:91:5a:ec:ab:69:2b:bb:06:
                    30:cf:54:06:61:df:02:21:15:14:e1:0a:b5:b4:1c:
                    1f:aa:49:1a:46:84:43:5d:6b:3b:f4:77:7f:91:44:
                    4a:06:9a:c2:1a:79:a8:a5:b2:fd:b8:e2:8a:5e:f2:
                    18:78:d7:57:1b:fc:db:6c:a1:84:4e:a0:b4:5d:83:
                    8d:61:ca:a6:1a:eb:10:02:ca:09:ce:4f:7f:2f:8d:
                    80:6a:b0:a1:f0:40:4f:ed:dc:40:e9:61:79:45:c2:
                    bd:f4:8e:17:e1:8a:5b:71:91:04:81:93:aa:05:4c:
                    a8:b2:ee:b9:cc:ef:ab:6f:be:66:16:9a:19:53:e1:
                    e1:17:87:92:34:32:9d:51:ac:f4:3d:f4:75:f1:64:
                    9e:87:d9:1b:26:5d:b4:44:8d:89:bf:24:a7:7c:2b:
                    05:8e:82:fb:48:89:a2:f6:12:67:1d:dd:2e:88:38:
                    ec:d1:4e:2a:ed:dc:57:95:97:1d:0d:96:e0:d8:6d:
                    06:74:14:f9:4a:a1:aa:f8:38:40:5c:64:a0:b5:ed:
                    ed:a5:3f:2b:ec:00:f6:b0:09:0e:d4:af:1b:c5:23:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:0B:09:FA:A1:2C:0A:8B:73:3D:8B:1D:76:A8:8F:60:1F:88:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:43:a8:3f:ef:8b:f4:0e:9a:d5:af:78:24:4b:ca:d5:39:c4:
         b2:bd:6a:4c:da:c8:16:27:5b:8d:1b:ee:47:48:6c:e2:10:68:
         ae:42:fc:b9:51:4c:fc:64:83:dc:59:a6:aa:17:74:60:c3:60:
         99:33:a9:98:89:58:44:6d:70:1f:2c:b6:0c:6a:57:19:3a:98:
         cd:f2:32:5c:00:00:6a:4c:27:c0:ef:bf:76:8c:7c:1f:1f:a0:
         fa:28:2b:58:e2:c6:36:e2:31:fd:7b:25:55:34:dd:72:0b:f6:
         d7:ea:18:66:fa:63:11:37:a5:9c:0f:2e:04:1c:2a:2a:b6:4e:
         bf:cb:9c:41:0a:d3:c8:50:df:3a:87:ca:df:ce:0f:75:97:8f:
         30:ee:79:a0:37:b9:27:1c:32:37:0d:da:29:e9:29:d4:15:32:
         dd:df:8b:9c:74:3d:44:5e:69:22:12:f9:51:a8:c7:d9:94:a9:
         a3:c8:92:23:7e:35:02:09:39:1e:47:19:d5:9e:d0:22:8f:2c:
         fd:1f:f9:c6:ca:96:be:f6:39:38:1c:cd:2d:ea:0a:11:7e:e4:
         dd:2a:45:2d:da:b5:19:6c:da:18:51:aa:4f:08:e3:83:12:4b:
         c8:9f:6d:5d:7a:32:46:82:01:21:2e:ea:b4:cb:50:af:6a:d1:
         9c:23:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:37 2026 by rpki-client