Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa
File:                     ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa (raw, json)
Hash identifier:          PBZ5zW3qxv8c5dqll91lm2bXaGqku1mBAjve0EohOhs=
Subject key identifier:   27:AC:4F:CD:45:1A:98:68:D4:52:0E:7C:F0:9B:11:F2:86:15:49:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E07009E8814EF654B19131F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396549
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9e:88:14:ef:65:4b:19:13:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=a7e1b691-705e-48bf-bad2-61a8033ef8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:5a:45:c6:01:e3:97:ae:50:94:d1:af:2e:
                    ab:df:1e:11:12:5c:89:fb:76:fd:f5:38:17:30:db:
                    8a:3b:1c:39:b3:d7:0b:7b:d0:d9:9f:71:dd:70:7f:
                    33:f7:0e:75:c3:52:57:e4:dc:8b:9b:0b:56:cd:e3:
                    cf:12:60:1c:cf:4a:85:da:67:b3:73:e3:35:8a:cf:
                    35:6a:35:6a:45:3f:c1:47:48:0e:ad:9c:f8:47:3b:
                    91:a6:0e:dc:4b:3a:6d:eb:31:cb:8c:a5:7d:5d:f7:
                    f2:2b:fc:4f:70:fa:0d:9a:d9:15:a6:d1:f7:a5:36:
                    51:5d:e8:52:28:75:b0:14:28:d3:50:56:b7:05:75:
                    5e:7c:c5:17:66:63:41:a4:46:f4:fa:21:09:fe:af:
                    67:d8:ca:9b:a4:da:4a:b4:2f:d3:88:15:47:9b:8e:
                    9c:a3:d4:9e:1a:72:0c:72:e5:03:54:16:45:60:9e:
                    51:55:89:37:2b:84:04:b4:cc:49:68:13:4e:3d:ab:
                    c6:2b:4a:a5:9a:bf:c9:77:8c:12:a1:dd:d5:85:d0:
                    14:27:88:bc:9e:21:e2:c4:ef:2f:16:52:78:76:90:
                    c1:0c:ac:1a:0d:da:fb:c6:cb:11:bf:8c:5c:df:2a:
                    67:fc:a5:8f:96:d4:bd:51:0b:03:53:e4:66:a0:d7:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:4F:CD:45:1A:98:68:D4:52:0E:7C:F0:9B:11:F2:86:15:49:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:25:b7:38:37:bc:48:26:ec:42:dd:d7:13:8f:b0:b8:b9:
         83:ed:43:8f:4c:3a:37:bc:6a:ea:9e:d0:ce:0d:1a:ff:ca:24:
         a5:28:60:8d:d5:53:31:b6:9b:59:48:b3:ac:21:83:c2:56:96:
         ae:e1:42:a3:ec:2a:e1:82:02:e6:cf:13:03:f1:ca:40:e9:6a:
         0a:d2:4b:3a:c5:01:98:00:38:74:b2:e2:1f:59:77:42:dd:f3:
         73:b7:ce:35:55:bb:d9:88:ce:2f:85:ae:58:e2:b1:bc:41:8a:
         a8:c3:c9:8d:3d:df:58:88:67:ad:26:83:d7:3e:5b:7d:ef:30:
         70:1d:f8:df:31:55:f2:cd:3f:01:06:46:44:2f:e1:6f:43:00:
         5e:c0:8f:1b:4c:e3:68:de:46:79:4c:e9:4f:b7:17:a4:ca:98:
         07:83:14:99:06:16:e4:bf:d9:d2:f4:5c:89:37:c3:68:5d:cf:
         44:a4:be:2b:ea:6c:9b:99:e6:80:2b:02:57:8c:0e:23:a4:3f:
         57:28:aa:fc:0f:7c:ed:4e:22:1b:34:0b:4a:a1:d4:da:6f:65:
         9c:57:76:54:de:ab:1d:ec:9f:bd:58:4f:93:0e:f9:9f:3c:be:
         7c:2e:41:cb:e4:14:9b:24:38:f1:e4:26:cf:6b:ee:62:30:48:
         a4:82:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:37 2026 by rpki-client