Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
File:                     a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa (raw, json)
Hash identifier:          C+jz1awEL3zEJrLrLcgaQCtuPwFw97FCHrn/htboc/w=
Subject key identifier:   C3:3A:92:BE:8F:00:50:5A:6C:EE:CD:E4:80:E2:20:D3:46:3E:B0:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7FF9A98D9D4B91D1E700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396576
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7f:f9:a9:8d:9d:4b:91:d1:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ebae5291-c059-4cb0-9b01-697ed0a20785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:11:ff:4b:19:06:14:97:0d:36:9b:83:b7:
                    a2:a5:07:78:af:50:d4:b1:ef:8a:75:49:b1:97:8c:
                    77:dd:19:cd:de:cd:e3:f5:3f:4f:46:70:d3:68:0d:
                    b6:15:83:42:8c:b0:ee:dc:03:81:cc:23:99:ca:1e:
                    b7:4d:28:b3:47:05:70:e2:52:32:93:89:a7:56:17:
                    f3:cf:81:17:27:27:97:31:9b:54:8f:74:ae:cb:3d:
                    e2:0c:82:f0:d9:3d:2a:86:49:13:cc:aa:c7:90:66:
                    7b:d1:a0:c1:47:dc:82:de:62:40:96:d6:59:d3:4b:
                    d8:44:46:a0:d6:54:1e:07:b3:ef:e8:90:8f:6f:46:
                    07:84:17:50:44:65:15:38:19:5c:d6:ff:fc:6e:d3:
                    01:87:bd:66:69:0e:67:f4:41:2e:35:42:d8:19:a4:
                    43:78:85:a2:e1:76:1b:78:30:e3:75:3b:54:24:ab:
                    26:69:de:c7:a3:85:fd:7d:64:bd:08:2c:6b:37:b6:
                    1f:65:4b:00:ec:23:7c:d3:ef:1d:23:43:87:87:c1:
                    2d:be:1e:c7:25:39:c7:ba:34:b8:b9:cf:b4:34:10:
                    75:b2:6b:c2:23:84:f5:28:6d:a7:36:3d:c9:66:a4:
                    e5:90:22:7c:f0:d9:05:86:65:de:a6:af:22:b9:4c:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:92:BE:8F:00:50:5A:6C:EE:CD:E4:80:E2:20:D3:46:3E:B0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:78:42:fe:de:5f:e3:73:20:92:7a:7d:95:79:6b:83:93:
         e1:ac:05:64:79:e2:89:d2:70:4d:0f:23:a6:92:d6:ef:98:b5:
         12:f2:cf:18:9d:32:b3:91:76:31:5b:ec:4e:6e:d6:ee:17:bd:
         3e:14:a9:a7:d3:66:20:cd:6b:13:2a:4e:f5:03:b9:e9:62:65:
         86:27:19:d4:6c:14:3f:b4:1b:81:a0:18:65:01:a1:42:f4:86:
         a7:48:33:a7:1b:47:cd:86:67:60:49:6b:1c:d7:65:58:80:fb:
         d3:31:ea:b3:c4:88:75:fd:64:93:97:ec:88:bd:c8:8b:6c:6d:
         5e:57:11:de:41:7e:4c:d5:3b:da:81:8f:f3:7e:fc:9e:24:0a:
         25:2f:fb:79:77:5e:81:7f:52:aa:95:ec:17:d4:9c:0e:1b:52:
         08:ba:fc:92:aa:3a:00:ef:03:58:70:13:e5:7d:7a:b5:a1:31:
         49:9e:e0:d6:ae:cf:70:31:da:ca:b7:38:da:ea:4c:74:95:0e:
         8f:c8:78:9e:ed:e7:6f:37:2f:8e:d1:a4:17:78:ee:31:e0:af:
         b8:53:b2:ba:b1:e0:ff:7e:40:cc:5c:a1:f3:93:7b:ae:ed:aa:
         13:7a:a5:3d:a6:e6:a9:04:71:ce:8d:d6:9b:a2:59:2c:72:e5:
         eb:32:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:11 2026 by rpki-client