Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbd94f9-861a-3985-ba50-1df9effabef5.roa
File:                     6fbd94f9-861a-3985-ba50-1df9effabef5.roa (raw, json)
Hash identifier:          GjgmzG/5LoLiXG81sOgURskyJHlEWs0eIzaB1SbDq7A=
Subject key identifier:   BC:DB:26:A0:BB:2B:97:04:FD:B0:0F:07:01:D3:B7:5C:E6:EC:BA:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA19F90EA92CC9E1D5A2600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbd94f9-861a-3985-ba50-1df9effabef5.roa
Signing time:             Tue 07 Apr 2026 14:30:20 +0000
ROA not before:           Tue 07 Apr 2026 14:30:20 +0000
ROA not after:            Mon 06 Jul 2026 14:30:20 +0000
asID:                     397205
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:9f:90:ea:92:cc:9e:1d:5a:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:20 2026 GMT
            Not After : Jul  6 14:30:20 2026 GMT
        Subject: CN=1be990ab-6d66-454a-a011-844973258e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:67:b2:07:18:f0:02:da:ad:d0:6d:d7:6e:
                    7b:39:86:fb:f6:9a:fa:38:da:fe:76:6a:96:b9:f1:
                    79:81:60:7e:27:7c:03:6d:b9:58:9d:1a:f3:53:ec:
                    58:af:0d:f3:c0:42:75:c0:fb:61:4e:5b:f7:90:de:
                    e2:f3:67:2b:b6:79:5c:46:10:b9:71:23:c4:ba:e8:
                    34:71:36:01:6e:72:6f:ca:fa:19:97:de:29:7e:83:
                    6c:8e:67:1a:fc:d1:63:ee:27:8a:4a:32:ad:40:b8:
                    08:1b:25:35:6e:0e:15:04:bc:0b:28:18:09:bb:02:
                    d4:e7:89:b0:c9:16:fb:65:32:d2:31:56:6d:65:6b:
                    f0:76:53:0a:85:b6:71:17:c7:83:3b:95:90:92:64:
                    49:16:51:8a:e7:24:26:f7:22:8d:a8:7c:cc:73:99:
                    c5:ea:05:f5:26:87:f1:92:57:fe:22:92:1f:c1:bb:
                    1b:2a:8f:0b:e7:3f:e5:d3:ea:99:68:e8:de:1c:d0:
                    ee:f2:0f:67:80:9e:e9:d5:4e:48:fc:ba:2a:3e:4d:
                    e4:e8:b9:a2:29:19:91:8a:75:5d:09:fd:9d:ef:23:
                    4d:f2:fa:dd:6a:32:bf:34:f8:e2:b2:03:72:25:22:
                    79:c6:ef:da:d7:99:9a:a5:d1:c3:24:4a:e3:61:04:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DB:26:A0:BB:2B:97:04:FD:B0:0F:07:01:D3:B7:5C:E6:EC:BA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbd94f9-861a-3985-ba50-1df9effabef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:fb:51:da:92:2a:6b:22:62:46:db:67:29:9b:52:3e:58:
         c2:3f:93:98:15:9f:8b:0c:83:a4:4e:67:ca:d0:04:74:54:be:
         6c:db:fb:91:53:51:0b:f4:fe:0c:a3:fc:50:80:79:bd:82:4e:
         2d:bb:a6:59:51:35:aa:7e:a5:be:53:09:60:3f:8a:48:0d:ef:
         92:24:f4:9d:95:4b:8a:81:3f:45:f4:9e:60:57:e7:8c:e0:05:
         c6:f5:06:7d:1a:7a:b0:10:b4:04:70:e7:61:6c:e1:1d:8b:c9:
         1f:a3:ff:74:13:25:72:ad:8a:98:5f:06:a7:61:9c:9d:76:9f:
         4f:4a:e0:8f:b8:e2:96:8b:62:b8:a9:71:d8:af:14:d0:61:84:
         53:1a:a4:c7:67:68:36:07:32:f1:7a:9d:cc:4e:10:b8:d1:f2:
         91:d0:32:92:d8:29:94:9c:d6:a3:9f:02:a8:77:41:04:88:f3:
         ec:47:5b:57:41:59:ed:21:71:98:23:46:96:cf:f6:44:4e:35:
         bd:32:22:5e:74:84:9e:99:86:f6:0e:f2:fa:a3:0b:d5:79:c1:
         64:b4:b0:84:d3:1e:94:f5:10:e2:ce:78:f9:81:a4:11:ba:9d:
         ba:d6:35:69:15:ec:4c:7e:07:7d:e9:71:ff:20:36:b3:71:b5:
         5b:3f:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:50 2026 by rpki-client