Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6bf5d2-7429-35d5-9cd5-6b8b4b282d1f.roa
File:                     7b6bf5d2-7429-35d5-9cd5-6b8b4b282d1f.roa (raw, json)
Hash identifier:          H+0ykJKd0awxhRV5QBs7AsA+0IDRujAJB18N+SYqsLY=
Subject key identifier:   59:88:30:BD:3E:90:46:57:B9:09:50:AC:B4:04:0C:78:3E:88:1F:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7E006C32919D810B4600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6bf5d2-7429-35d5-9cd5-6b8b4b282d1f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396546
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7e:00:6c:32:91:9d:81:0b:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=aa639c50-85e9-4564-a894-bf91dd48d356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:65:5f:88:5f:d7:2a:78:8c:f4:33:81:65:
                    2b:38:c1:de:88:29:c8:06:dc:b5:50:de:61:48:fa:
                    3b:26:0a:93:eb:bf:ff:bb:1e:74:3b:3f:0a:cb:e6:
                    0b:95:74:8c:de:09:61:98:e0:65:cc:72:c5:02:ec:
                    72:d7:4f:43:d7:2f:d4:0a:fd:a8:0f:2e:fb:99:27:
                    99:9b:75:72:17:fd:b1:88:47:f7:8f:1b:61:f2:01:
                    6b:00:3d:33:a5:f7:7b:17:5c:ea:b3:18:f1:53:66:
                    3d:eb:6d:88:de:e5:5d:52:6b:63:d0:ca:32:91:76:
                    1c:d9:bd:4b:75:20:8f:ef:b5:97:81:b1:c3:f1:26:
                    59:14:a1:03:c5:69:d4:43:d4:cc:28:86:73:6e:12:
                    d5:24:c7:51:1e:e9:e1:31:b9:03:5e:67:c8:8e:29:
                    b1:60:3c:00:72:54:5f:ee:74:e1:69:b6:bb:58:54:
                    81:1d:99:2d:00:8a:8f:17:2a:42:25:f9:7d:97:8e:
                    2d:0e:21:e6:42:d0:1d:4b:04:59:29:c3:02:62:8d:
                    87:2b:c8:31:b2:a2:ab:71:af:5e:5f:bb:a8:bc:a4:
                    9a:57:a1:01:87:c2:f1:e3:fc:ce:12:bb:ef:cc:95:
                    87:e7:29:6c:9c:a4:bf:41:5c:f8:23:45:6c:74:e3:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:30:BD:3E:90:46:57:B9:09:50:AC:B4:04:0C:78:3E:88:1F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b6bf5d2-7429-35d5-9cd5-6b8b4b282d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2e:3d:8a:ee:97:a2:9e:44:1a:2b:ae:7a:0d:24:61:a0:c5:
         d0:0c:b9:2b:79:c7:8f:b6:c4:ff:6b:a8:d2:92:f7:52:dd:55:
         58:da:8e:4d:b9:68:28:db:c0:56:fb:c4:fe:84:f1:69:b5:8e:
         95:58:cb:28:04:ef:3a:cf:a5:db:3b:e0:2b:65:a8:db:eb:27:
         ec:5b:0b:b5:20:cf:d1:e6:65:cc:32:56:b6:5b:0d:e7:af:1b:
         44:ab:43:96:6b:54:74:10:cf:46:48:45:33:d1:ec:97:1e:1f:
         39:d4:aa:55:66:1b:af:ea:23:36:c5:cc:20:f8:8e:25:ae:6a:
         8c:68:fb:bd:89:8a:df:79:14:fa:99:e8:5d:45:db:3b:77:02:
         c4:39:d7:fd:5f:93:eb:ac:f9:5f:d9:bc:b3:89:a4:84:f5:10:
         94:2f:a0:bf:d4:bd:56:67:01:b2:cd:3c:76:12:0a:51:47:bb:
         b9:d4:bf:f9:56:79:8e:9f:34:2f:1e:ea:58:28:56:22:29:67:
         fd:e6:5c:dd:5a:2a:41:01:b3:04:67:e4:75:ac:74:6c:50:4b:
         b2:35:4e:9a:ca:fe:8e:d7:c6:dc:16:12:a0:2a:d8:a7:f8:58:
         85:df:1c:84:d5:0e:f3:09:16:11:01:ff:79:bb:fa:e6:35:d8:
         1b:8b:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:28 2026 by rpki-client