Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa
File:                     8706a23e-42f3-39ef-9b21-0a78c3470093.roa (raw, json)
Hash identifier:          A6mKcaa9KtCyJqI20r9IT1BuAOJAgDs+28fGuCK6EmY=
Subject key identifier:   0C:C4:EE:D9:06:E4:35:2C:39:B6:59:01:32:9A:4E:93:C4:D7:76:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00063454466D06196701A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     19836
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:34:54:46:6d:06:19:67:01:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e1133285-fc83-4ea9-809f-b4147e43501a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:7c:39:21:9b:ad:a9:2b:a9:4a:1e:7e:57:
                    ba:32:1d:90:58:49:dc:38:f8:3a:43:29:f0:d8:05:
                    57:b2:22:4d:78:b5:43:48:63:5e:e5:fd:91:d9:9c:
                    fe:93:0d:d1:3a:78:c6:a4:5b:ce:bb:d5:19:82:e5:
                    ef:33:07:89:8b:80:27:31:16:81:70:17:93:9a:63:
                    bf:d8:e4:b7:10:a6:03:68:07:2f:2c:f9:21:0c:b1:
                    cc:f4:c9:96:ce:16:a6:5b:f5:3a:87:82:e4:fd:d2:
                    c0:e1:2a:42:10:77:7a:03:8c:71:ad:e8:f7:32:b2:
                    ad:87:d2:ef:f9:7e:fc:2d:a7:d9:f7:9c:c9:18:55:
                    bd:3c:9f:26:25:63:13:36:b8:8e:df:a7:68:e1:f3:
                    22:0a:48:e1:74:d4:55:05:ab:00:9a:6d:16:88:38:
                    a4:d9:7d:26:fc:42:cf:d6:6f:04:79:38:03:df:e9:
                    95:3b:56:95:c0:92:8b:9c:24:e1:c1:66:8b:92:cd:
                    d8:3c:9a:ce:b7:bc:ab:26:44:47:7c:b1:66:8d:42:
                    76:17:76:33:98:31:55:d2:8c:e0:01:61:98:ed:71:
                    80:6c:13:d7:b8:2f:9f:87:44:79:d1:41:37:47:a6:
                    9f:8b:01:17:1d:a4:53:d6:f2:7b:37:d0:a6:59:3b:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:EE:D9:06:E4:35:2C:39:B6:59:01:32:9A:4E:93:C4:D7:76:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:6a:55:b9:a0:3c:5a:9d:46:39:86:3c:f2:66:29:4b:c1:
         18:ef:3f:78:e3:ed:1c:00:7f:32:f9:ad:23:65:29:d1:b5:81:
         7f:8a:0d:35:80:92:61:8d:fd:a5:f2:28:e5:26:19:b2:52:78:
         44:4a:ce:e8:d2:0a:8f:55:5b:ed:f5:97:75:95:fb:86:60:dc:
         f9:f0:52:d4:57:76:46:63:ab:a9:ac:13:af:9d:07:6b:39:16:
         f2:c2:4d:5a:f5:6e:db:d8:04:15:2e:62:08:1b:b7:5e:ec:e8:
         ba:77:9c:6d:b7:ae:9d:b5:b8:70:30:be:27:c9:9d:5a:86:9d:
         c9:7a:e8:aa:03:9d:01:d7:1b:98:1a:33:8a:97:35:b5:ae:0e:
         9d:ac:01:c2:aa:57:13:85:fd:9f:6f:24:1c:fd:ca:6c:cf:02:
         3f:90:50:c3:a3:01:62:45:f0:d8:5e:1e:e7:b5:50:b2:37:fa:
         c2:88:ca:8e:69:c6:2a:ca:46:09:1b:7f:e2:96:2c:98:8e:ec:
         e9:c2:18:fa:89:ee:f3:d4:32:bd:66:4a:dd:dd:b1:1f:73:63:
         1d:21:00:7f:0c:62:1c:95:a3:da:8b:dd:56:3e:bc:69:d9:f6:
         75:f9:a0:00:4f:e1:fc:d4:d1:f0:77:ab:59:63:c0:ee:69:da:
         78:eb:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:45 2026 by rpki-client