Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ae95ec-5536-3dbb-9fea-ce57389d30e3.roa
File:                     a7ae95ec-5536-3dbb-9fea-ce57389d30e3.roa (raw, json)
Hash identifier:          6N2CS40kviH4nKTsYUTktZkjbo7wIVpcEcGhuz7rclQ=
Subject key identifier:   85:7E:76:03:A4:18:E9:77:83:05:3A:90:B6:C0:F2:03:64:66:2D:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE2D89D0A363B09F0CDB12000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ae95ec-5536-3dbb-9fea-ce57389d30e3.roa
Signing time:             Tue 19 May 2026 14:10:43 +0000
ROA not before:           Tue 19 May 2026 14:10:43 +0000
ROA not after:            Mon 17 Aug 2026 14:10:43 +0000
asID:                     396588
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:9d:0a:36:3b:09:f0:cd:b1:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 14:10:43 2026 GMT
            Not After : Aug 17 14:10:43 2026 GMT
        Subject: CN=624df9ae-ed69-4ce7-bae0-b7f39eeb0313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:b2:de:6d:71:65:24:25:de:bc:f0:95:4a:
                    57:f4:e3:97:92:a3:c4:a3:1b:93:48:37:c1:27:1a:
                    0d:1f:c0:db:70:ab:a7:e8:87:61:2c:f2:1b:03:b5:
                    54:c6:d8:48:25:66:05:c4:ca:ae:d7:24:18:4d:73:
                    99:a5:78:80:5c:d5:50:ad:b2:79:38:84:7b:12:0a:
                    03:1e:72:20:c7:e9:9e:2c:a4:c3:7f:71:6f:60:7e:
                    16:7e:c1:ba:44:42:0c:9f:27:4f:74:9a:5d:af:2b:
                    30:50:a8:f6:88:90:89:08:3a:4e:ea:4e:3b:87:0e:
                    f9:7b:20:f2:2d:3f:74:0b:5f:f6:b2:08:4b:85:d3:
                    32:f3:3f:6d:f0:cb:73:1a:4b:e4:70:83:78:47:e6:
                    ed:83:03:7c:f0:8b:2e:b0:6c:87:ec:2c:14:6c:af:
                    59:1e:40:87:77:7f:f0:7a:d5:be:e0:af:bf:2e:12:
                    70:ed:ae:f7:8e:bb:57:fe:be:9f:62:50:70:0c:31:
                    91:40:08:c9:71:2b:97:c8:eb:6e:f1:be:4e:11:7a:
                    c1:8a:44:e9:b6:70:40:33:01:b2:7f:f5:de:c2:11:
                    55:36:27:de:6e:5f:17:79:e8:12:e3:5c:ba:f2:e9:
                    67:3c:69:83:ce:02:fb:e6:2d:fa:c3:22:96:5e:24:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:76:03:A4:18:E9:77:83:05:3A:90:B6:C0:F2:03:64:66:2D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ae95ec-5536-3dbb-9fea-ce57389d30e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:56:0e:b4:49:42:9d:6d:dd:2a:7a:14:19:b3:ed:56:e4:87:
         76:4f:95:48:29:a2:89:4d:d3:4e:e3:ec:89:b2:f6:7f:77:f2:
         cf:fa:e8:dc:20:08:d7:26:51:81:3b:7d:f3:c9:92:2d:e1:36:
         ab:93:a6:8e:49:30:3b:bb:94:ea:5f:c7:94:58:39:9a:bb:c9:
         9d:7f:31:23:f3:e4:0a:f8:9b:6f:36:a2:e3:7f:ba:7d:a5:6c:
         61:35:80:9e:66:fd:db:a8:4f:db:19:9a:22:89:a5:e2:8e:95:
         38:dc:39:65:f8:9c:67:64:0a:49:31:73:25:7c:bd:22:d0:f4:
         34:82:b8:d0:60:12:d2:f8:be:5a:04:ff:98:01:13:14:6f:6c:
         35:52:98:72:9f:37:39:2b:62:fd:3a:fd:8c:d2:16:d2:2a:8c:
         cc:0c:b3:71:f8:75:9a:fe:06:8b:35:1c:8f:a9:0f:b5:cb:00:
         f9:50:33:67:bc:05:c9:43:c5:fa:b9:d3:07:cc:86:96:fb:d7:
         2d:44:88:5e:75:34:10:45:9e:48:d5:76:fa:9a:5b:21:8a:28:
         43:9c:6a:3d:28:24:4a:2f:85:6a:07:8c:b5:6d:ba:d2:61:da:
         e2:32:21:e4:2a:4f:61:ee:21:de:17:f2:4b:a0:12:58:85:50:
         91:64:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:21 2026 by rpki-client