Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d4e80dd-c196-3758-b764-6356dbbad4f2.roa
File:                     7d4e80dd-c196-3758-b764-6356dbbad4f2.roa (raw, json)
Hash identifier:          C731lv38sK5V/bG/WykOxxbkDbC4CbPzTNAZ48ym1Co=
Subject key identifier:   9F:90:1F:7E:12:73:9A:88:EB:B1:10:C3:F6:4E:FB:7D:84:2A:34:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3EEA85E013EE09FBD700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d4e80dd-c196-3758-b764-6356dbbad4f2.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     25485
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3e:ea:85:e0:13:ee:09:fb:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=a5b9e12e-a4db-4526-bede-b1bb0447473a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:65:9b:2a:fb:d3:29:ef:b7:f0:d0:26:6f:
                    3c:2e:2a:fd:6a:31:77:fb:8e:be:41:bf:1b:13:46:
                    bc:84:55:8f:24:27:50:35:a0:3f:fc:5c:c2:4e:6f:
                    3e:17:b0:54:b3:bc:00:2f:09:ab:f2:aa:bb:1f:67:
                    6e:73:9e:1f:39:ba:09:35:f3:a7:73:a2:17:36:5a:
                    2d:ff:fd:5f:98:93:a5:b6:28:0f:7b:32:89:4c:08:
                    dd:46:c7:2b:c4:e2:b4:fe:e5:06:3e:60:ab:30:13:
                    db:a9:63:9f:d4:47:e1:09:f0:86:e9:80:ac:03:04:
                    5f:91:4d:b4:1c:0f:7a:85:4c:9b:70:2b:e3:c3:9b:
                    92:b2:df:25:24:85:5a:68:dd:6d:96:f5:db:12:9c:
                    29:ec:64:2d:5a:fc:2e:46:e1:75:64:e4:8b:ea:eb:
                    ee:c6:b5:e8:40:1b:3b:7d:62:9f:66:ed:8a:b7:aa:
                    46:c1:8f:f6:13:2b:3e:aa:e4:1d:17:ca:bc:27:47:
                    cf:c6:30:e3:8e:c2:d4:f1:39:d0:ef:6b:55:69:82:
                    5a:ee:54:31:1a:8a:22:88:d2:55:2c:9d:58:9f:0c:
                    f8:db:df:cc:87:ae:5e:b5:34:59:74:5e:54:08:d8:
                    ce:43:a5:d4:93:97:1a:6f:f0:ec:ae:24:7c:9a:40:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:1F:7E:12:73:9A:88:EB:B1:10:C3:F6:4E:FB:7D:84:2A:34:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d4e80dd-c196-3758-b764-6356dbbad4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:c8:a4:c6:77:30:d6:09:c7:79:70:ef:fc:17:87:02:d0:
         2f:56:ba:1e:aa:ec:d5:16:5e:03:35:de:68:87:00:fc:bd:2e:
         76:35:0e:4b:11:c1:69:0c:20:26:6a:6d:97:37:11:35:f6:cc:
         38:25:ad:96:ff:66:bd:59:e8:50:94:22:11:09:a7:d8:b9:41:
         16:a7:3f:29:7c:37:b6:f3:b5:fb:fd:8b:e0:a5:34:93:13:23:
         ce:a1:fc:a6:e1:db:02:e7:35:cf:ec:f0:26:db:11:89:7b:f3:
         4d:c9:fd:00:a7:e5:b3:2d:12:5f:e7:8f:4c:13:0a:c3:5e:71:
         07:3a:22:76:61:3d:f0:7f:64:fa:ff:41:5c:4f:86:22:32:6c:
         26:f4:4e:81:6e:b6:a6:33:13:fb:95:89:19:b4:7a:fc:47:3f:
         d7:5a:c3:c6:7b:95:65:17:21:d3:31:da:3e:a3:4c:04:18:a4:
         11:5d:06:cd:a2:6b:79:8d:02:c7:fe:29:3c:91:bc:d7:6d:67:
         f0:b3:ef:76:8b:15:22:d9:7d:86:b0:e9:b9:53:9b:02:88:b9:
         17:d5:d5:dd:de:fd:10:05:7c:a3:19:c6:6e:5f:b5:6e:c9:e7:
         c0:dc:50:6b:9c:d7:7f:b1:05:e5:28:74:ca:02:e3:5a:f3:7c:
         ce:8c:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:14 2026 by rpki-client