Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d548b93-2782-31a6-91f2-9b5fb4ed0340.roa
File:                     9d548b93-2782-31a6-91f2-9b5fb4ed0340.roa (raw, json)
Hash identifier:          eiN2ct0/1mgCbkAPi3NKEbXrGiNWQnbvhlZjsWbtUVM=
Subject key identifier:   D0:31:00:C7:CE:1B:95:60:D6:B3:B8:1A:33:F9:D2:BB:97:5E:9E:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D93E68D19D44AA6D7B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d548b93-2782-31a6-91f2-9b5fb4ed0340.roa
Signing time:             Thu 14 May 2026 14:08:00 +0000
ROA not before:           Thu 14 May 2026 14:08:00 +0000
ROA not after:            Wed 12 Aug 2026 14:08:00 +0000
asID:                     396615
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d9:3e:68:d1:9d:44:aa:6d:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:08:00 2026 GMT
            Not After : Aug 12 14:08:00 2026 GMT
        Subject: CN=37ee6b96-1c88-4b2b-95bf-584bd9b69e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:d0:32:e9:9e:9f:c9:e0:f3:9b:e2:6d:a3:
                    34:dd:f0:04:c8:5a:a6:61:cc:22:11:c0:99:f2:9a:
                    1c:2d:1d:0e:a3:d6:50:66:50:c8:3e:51:73:cb:65:
                    10:f5:bd:07:7c:55:09:d1:7f:85:04:af:97:c6:4e:
                    2a:ac:f1:64:17:ab:1f:a8:28:fc:f3:74:f0:47:5d:
                    61:a9:95:8d:11:81:d8:79:4d:98:ac:42:c2:52:d7:
                    2c:22:81:c1:f4:90:4a:71:6a:41:9d:b0:24:c4:1e:
                    ba:ed:f1:69:60:bc:32:a7:9b:c4:34:8d:42:e9:b8:
                    db:b0:a2:e3:94:64:e5:b3:be:c6:10:64:00:f2:ac:
                    be:bb:94:41:b4:31:e9:a4:16:ac:56:6e:cc:f1:8e:
                    c1:fe:63:f2:bc:c3:7e:0e:c2:f7:6a:0f:65:51:e1:
                    14:66:f0:6f:3a:c2:de:de:29:34:d3:1c:7e:5e:d4:
                    a3:56:fe:f3:7b:89:e0:fa:00:2c:39:e7:f3:cc:59:
                    66:81:72:37:6c:21:10:c6:f0:9b:25:bd:f0:d8:db:
                    b4:b7:44:f3:d2:51:62:9b:94:34:57:0d:e5:d0:bc:
                    36:09:d5:d4:a0:c4:36:39:48:be:ef:b5:f9:e6:83:
                    7e:b8:40:2e:cf:5a:cb:0e:62:9b:f0:65:25:cd:6d:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:00:C7:CE:1B:95:60:D6:B3:B8:1A:33:F9:D2:BB:97:5E:9E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d548b93-2782-31a6-91f2-9b5fb4ed0340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:de:f7:45:10:7b:88:78:5c:5a:3e:a9:44:8a:fc:ef:ab:
         62:3c:4b:a1:db:9e:86:7a:60:0f:b2:65:0f:62:71:eb:c5:bb:
         a2:a2:f0:e9:a4:4c:49:c4:f9:b8:bc:53:c2:4c:ff:47:b7:6c:
         f5:f3:19:c9:52:eb:e3:c0:61:90:b2:d3:f7:4d:35:5c:a2:4b:
         ab:c5:76:71:8a:66:77:62:a6:de:aa:1d:d7:ec:26:62:86:44:
         82:2e:88:0f:38:8f:57:6e:d9:22:8e:5f:21:6a:79:2a:e8:2e:
         bf:20:85:1d:a5:ec:ff:2d:d1:77:a8:52:0a:32:f4:36:b6:c4:
         61:5a:e8:9b:3d:76:af:47:ac:5d:eb:91:a5:e7:3a:03:10:d2:
         fd:ae:1d:62:e9:1c:67:f5:2d:18:cd:9e:b7:58:bd:39:a7:40:
         14:1f:ce:81:d5:e0:ee:21:8f:5f:e3:2c:01:8d:07:75:6b:1e:
         58:da:d2:49:a8:f5:78:d3:87:ca:ad:e4:95:3a:4c:8f:7d:fa:
         7d:e2:83:e3:02:a2:02:c2:0d:6b:8b:b5:e0:df:4d:b0:a1:5f:
         50:b1:01:7c:5d:ff:6c:64:fb:0a:f2:e4:4a:a0:97:cb:51:ca:
         c9:3a:4d:02:86:4d:c0:16:29:60:92:37:24:68:b1:cc:59:e2:
         18:61:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:35 2026 by rpki-client