Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97a588fa-bbf6-3ecb-940e-5617c042645c.roa
File:                     97a588fa-bbf6-3ecb-940e-5617c042645c.roa (raw, json)
Hash identifier:          C5/902xOF9WjQoteLpD5+XsqI4VyHmxRwPO02c6sQy4=
Subject key identifier:   CD:57:38:34:BB:34:02:35:F9:8E:D5:CD:DD:19:E7:B2:1C:FD:2F:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7A652F78C2F61A33ED20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97a588fa-bbf6-3ecb-940e-5617c042645c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396608
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7a:65:2f:78:c2:f6:1a:33:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=df4ed5cc-49ce-43de-a567-04ee61985fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:cc:d0:8c:8d:3b:49:6f:5b:47:b7:3f:3f:
                    df:20:fb:33:f4:3b:93:46:0f:f4:06:41:68:3a:e1:
                    51:78:22:6f:48:1a:8c:7d:d5:5e:f2:e6:bf:0a:84:
                    10:9e:94:98:b0:27:b1:04:1d:65:d3:87:9a:0c:ec:
                    b0:13:6b:06:3b:ee:89:4d:6a:78:20:ba:6f:48:05:
                    ed:04:b7:4e:1f:f1:8d:0c:65:48:02:7e:68:91:69:
                    4e:1f:2f:ab:bd:a6:43:a9:37:c7:8e:a3:09:3a:63:
                    1d:09:54:ac:22:69:4b:87:19:0a:f3:98:2d:a1:9d:
                    38:2e:f5:ba:5d:1c:a5:13:87:cc:84:d0:0f:41:70:
                    8e:42:ed:c3:80:63:9e:58:64:c6:c4:84:84:6a:47:
                    ad:11:15:c6:00:1c:4f:a8:8d:30:87:e3:d4:cd:41:
                    a2:ca:a6:a7:6d:c7:4d:14:de:c7:74:ad:81:4b:d1:
                    c7:e2:5b:38:1b:4f:eb:f1:3e:d9:c2:a5:52:84:7d:
                    1e:7f:e4:2a:f0:0f:30:0a:c0:07:22:4f:a7:8b:0b:
                    54:06:b9:a1:a9:5c:05:81:e1:91:a7:31:bf:0d:d9:
                    fe:4b:f5:fe:ec:b0:c0:55:8d:1c:a5:73:2e:2a:ad:
                    27:77:0e:90:0a:b0:a6:81:67:6c:ce:bb:8b:eb:27:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:57:38:34:BB:34:02:35:F9:8E:D5:CD:DD:19:E7:B2:1C:FD:2F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97a588fa-bbf6-3ecb-940e-5617c042645c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:17:f5:19:78:0b:6d:6e:69:cc:b6:93:bd:1b:5b:ce:a9:3d:
         d4:36:2f:50:0f:9c:96:5d:39:4f:09:36:dc:c4:af:63:dd:95:
         3d:b6:40:d6:43:aa:49:4b:08:8c:d6:45:40:6c:cb:c8:89:79:
         af:6f:e8:f7:be:fa:5d:ac:6e:66:c5:38:0e:68:3e:06:20:46:
         13:5a:e3:62:7c:fa:38:1e:3b:89:43:c0:d5:77:50:95:8d:d8:
         d3:d6:3d:06:53:4c:3c:ae:ed:73:9c:b7:f4:10:cc:c8:b3:4e:
         89:94:7a:2b:8a:f7:28:9c:5d:e4:b8:ce:8b:37:0a:af:78:16:
         17:d3:52:e7:b6:bf:ad:70:57:39:f9:f0:a9:73:a0:48:1c:de:
         bf:59:1c:09:9c:fa:99:55:e3:ef:56:3b:43:2c:bb:42:f9:19:
         b6:00:56:2b:b8:92:28:44:5f:7c:ce:ad:35:fb:5f:67:66:60:
         6a:36:5c:ae:c7:2f:aa:84:8e:c5:cc:54:05:36:7d:aa:dd:50:
         ef:6a:5e:9f:cd:7d:db:d1:f5:5f:c1:64:c1:c4:43:7d:60:17:
         bc:70:2d:9c:99:ff:7b:8d:97:d0:91:96:d0:db:86:a4:b8:4b:
         7d:f4:10:c3:c9:42:f3:ca:d7:72:f2:ed:1f:7b:8b:f7:36:97:
         c0:b5:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:42 2026 by rpki-client