Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa
File:                     7e238fc7-73f3-3d6d-963f-db645558d39b.roa (raw, json)
Hash identifier:          QFeyQkq7ipoD0Dfq3LYhTc112c81WNqp0R27UW+/tGg=
Subject key identifier:   F6:AE:25:82:66:31:A9:97:31:27:DE:57:52:17:A6:47:29:A1:7B:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E070091F50C96B8121FE62D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     397199
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:91:f5:0c:96:b8:12:1f:e6:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=23dead91-330f-4c68-9e85-3094cefaa8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:06:39:55:c5:45:b2:a5:e4:ab:0c:f1:cb:
                    b7:fa:56:40:b9:e0:ef:97:cd:1d:d5:a9:48:43:eb:
                    a9:17:f8:f4:cc:14:c3:a0:2b:b3:79:6c:ac:ca:01:
                    45:fc:7a:a8:35:be:93:00:cb:df:84:12:81:e5:d6:
                    f3:63:7c:8d:8a:23:7e:d2:5d:a3:90:19:8b:55:d6:
                    11:30:76:ec:3f:ef:47:96:a4:55:88:31:e1:81:77:
                    8b:1f:f5:b7:42:89:3d:04:ad:7a:e9:65:bf:c8:f3:
                    f5:c4:df:c3:08:bc:80:e7:25:e2:7f:3c:7f:e2:c9:
                    21:ae:1b:08:b6:39:12:19:6d:55:d5:ed:a0:a4:87:
                    b0:ee:4d:a1:5a:d2:7a:14:2a:47:0e:70:af:ac:75:
                    04:16:a6:5b:8a:87:c5:98:49:54:75:75:67:2e:44:
                    9d:81:0c:f7:25:d7:ec:d0:43:b7:f1:63:46:d7:fe:
                    8d:ef:9a:32:04:b4:a5:6b:8f:c4:61:53:9b:1f:fa:
                    1e:b6:e7:d0:22:d0:cb:27:93:f3:f4:4c:6a:a4:22:
                    92:8f:5d:38:dc:15:b6:ea:7c:98:c9:98:c0:45:49:
                    5e:ef:89:1c:b8:e3:0e:26:88:28:36:6e:eb:0d:56:
                    0f:36:e4:cc:b2:f6:8e:09:e6:32:53:49:37:be:0d:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:25:82:66:31:A9:97:31:27:DE:57:52:17:A6:47:29:A1:7B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e238fc7-73f3-3d6d-963f-db645558d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:95:ea:9a:36:81:0d:dc:bb:b7:4d:90:ac:56:55:86:8d:67:
         19:92:67:16:28:f4:f8:0a:e0:d0:22:29:98:97:47:8c:4e:89:
         1a:f9:0f:e0:d5:d1:2b:5d:4c:48:41:82:73:86:bb:79:84:f6:
         3c:36:9c:12:39:15:77:6c:69:86:7f:06:a0:3c:86:41:cc:a3:
         1f:bf:e8:15:5c:1f:2c:a7:4d:55:d3:61:18:88:7b:38:2d:5e:
         57:87:c2:b0:a5:70:5c:91:45:56:62:72:ba:bb:2b:98:13:8c:
         55:16:59:8b:f4:cd:8a:69:24:4e:3f:fc:f4:13:92:96:cd:d4:
         0f:32:6d:fc:94:94:8d:6e:3c:eb:72:b0:39:c6:8f:38:b9:83:
         d4:ed:ee:8d:74:4c:2e:52:65:12:13:62:90:57:48:12:b2:c6:
         a2:6d:14:a6:7a:7b:f6:2a:42:8a:bc:77:45:5f:43:5a:1a:16:
         b3:6e:03:e0:74:23:d9:a6:73:60:22:bc:8d:f5:6b:69:e3:3f:
         70:4d:b2:64:a7:8d:bb:93:b4:5e:bf:74:85:7d:e7:8d:ca:fd:
         fb:e6:bb:57:1a:97:15:3d:2e:52:97:5f:c3:fd:78:e8:1e:75:
         d0:be:bd:c1:6b:6f:ba:02:24:d2:fa:fd:92:ef:0b:10:38:8d:
         15:88:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:34 2026 by rpki-client