Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1a602-5ce7-3876-9d9c-828c2a519fc9.roa
File:                     6ef1a602-5ce7-3876-9d9c-828c2a519fc9.roa (raw, json)
Hash identifier:          3yBJUcFm6XWbeCt7zqegGfB41OZI5a1L3dnWPyfwDqU=
Subject key identifier:   9C:99:30:D8:D6:4D:CE:8A:34:08:B9:4B:14:E6:80:58:5E:0F:61:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA196D90D436A27D2E191F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1a602-5ce7-3876-9d9c-828c2a519fc9.roa
Signing time:             Tue 07 Apr 2026 14:30:16 +0000
ROA not before:           Tue 07 Apr 2026 14:30:16 +0000
ROA not after:            Mon 06 Jul 2026 14:30:16 +0000
asID:                     396541
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:96:d9:0d:43:6a:27:d2:e1:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:16 2026 GMT
            Not After : Jul  6 14:30:16 2026 GMT
        Subject: CN=0a1be6e9-f538-4ed4-9111-2a4da83afded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:45:f4:5e:e5:df:45:19:0e:4e:a1:fa:96:
                    e5:22:c3:88:f5:32:00:78:05:28:ce:48:23:2d:11:
                    31:f7:e2:71:a4:5d:ea:59:86:35:3f:73:14:f6:b0:
                    bf:ce:2c:10:32:23:75:de:4e:5b:a4:4b:6b:d7:dd:
                    81:a2:c1:de:49:75:0e:45:55:5e:dc:99:90:2c:2e:
                    83:af:20:55:ae:5d:b9:78:73:fa:2a:9b:6e:c9:07:
                    24:9a:0d:1c:60:db:40:c6:04:be:e8:4c:b9:cc:9d:
                    a6:25:fb:d4:14:c6:02:b2:ce:41:bc:0b:9f:83:d1:
                    69:94:79:42:78:b5:3e:3f:26:05:c5:a3:83:c4:2c:
                    d5:26:42:7d:9c:46:75:7c:25:06:fd:16:c9:56:44:
                    95:ae:ed:9a:80:c9:ab:8a:49:cb:64:2f:a4:9f:96:
                    58:0b:0c:53:80:fc:f0:88:fd:11:2e:59:09:47:f9:
                    76:e6:35:ff:e7:12:47:3a:47:e5:65:5c:16:3e:ca:
                    03:b0:3b:36:ef:bb:9e:d9:63:e8:00:de:7b:34:da:
                    7b:f3:00:f4:a4:b1:b1:3c:5f:96:6a:75:9a:93:78:
                    77:0a:02:a5:10:26:a8:6b:70:04:c6:c1:b9:d9:24:
                    d7:31:b4:25:e6:05:65:13:b9:34:4f:c6:d5:03:cd:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:99:30:D8:D6:4D:CE:8A:34:08:B9:4B:14:E6:80:58:5E:0F:61:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1a602-5ce7-3876-9d9c-828c2a519fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:85:a6:f6:75:46:f8:a0:4c:65:52:49:a6:0c:e9:32:b6:
         42:fc:dd:e8:88:e8:0b:7e:68:ca:01:3f:60:8c:0e:67:04:92:
         0d:05:76:94:8d:da:52:ef:0b:07:b9:2f:df:ab:2d:5c:13:e0:
         c4:6d:38:e1:f1:6a:4a:fd:4f:2c:2d:e1:f9:1a:06:58:79:31:
         ae:85:0c:eb:2c:03:07:f5:b6:a5:89:a8:ae:53:88:48:55:38:
         f5:ed:f0:c3:00:22:6f:80:96:9f:d1:ce:f7:ba:35:4e:46:ea:
         06:3b:9f:33:cc:94:cb:98:6a:f5:76:dd:a2:0a:39:fe:6d:f3:
         ab:5b:a6:ac:4d:c7:0c:3e:5e:56:d3:4f:ed:ea:95:81:ff:af:
         52:75:8f:86:0e:5c:4b:a5:f7:6d:60:97:89:de:77:ec:b1:1c:
         0a:ae:0b:ca:57:a2:3d:ac:3a:19:31:18:b3:58:d3:db:84:ae:
         00:44:cf:08:77:f8:d0:13:0d:bc:a4:53:7d:31:76:d8:04:75:
         2c:e4:a5:07:3e:57:43:51:67:32:7a:ac:90:2b:08:bf:d0:95:
         e1:dd:ed:cf:d3:fb:f4:63:5f:06:d3:06:d5:fa:31:c5:b8:8b:
         59:63:8c:a1:5d:9f:12:9a:6b:f2:3f:63:8b:9d:3b:0c:00:48:
         b9:df:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:41 2026 by rpki-client