Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab54be68-d429-35fd-a9ff-195a9ebb8468.roa
File:                     ab54be68-d429-35fd-a9ff-195a9ebb8468.roa (raw, json)
Hash identifier:          jiXlyf4x5WTc7KPMo/kCr97DBAslDBIzOKCxhGQRT6I=
Subject key identifier:   B5:CD:2C:2A:B8:B8:FA:63:DC:0C:CD:13:1B:91:A6:26:49:42:6F:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E444B1BDFFB7223FE68E030
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab54be68-d429-35fd-a9ff-195a9ebb8468.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36630
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4b:1b:df:fb:72:23:fe:68:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a8c96dc9-f049-4eff-b269-a0ffb3571f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:a6:77:7b:52:1f:f7:4e:b4:bd:06:93:84:
                    12:1e:63:3a:b9:cf:23:ac:b3:8d:cb:88:2f:70:3a:
                    ed:9e:0b:15:fd:7f:e8:e1:62:52:96:ed:87:10:01:
                    1e:48:49:db:03:48:c8:73:9a:9b:65:05:d5:eb:2a:
                    16:0e:84:0c:2e:b6:d4:9d:30:37:42:78:8e:ce:5c:
                    81:1c:0d:bc:41:65:cd:1f:6c:b8:70:fe:42:e3:76:
                    68:a0:38:3f:8d:9c:35:3a:48:91:f6:2a:76:ca:aa:
                    c8:46:87:10:12:e8:35:1e:45:0b:28:9a:ad:9d:e7:
                    ca:68:81:75:aa:ea:53:c2:ad:06:3b:41:77:d8:7e:
                    1c:1e:4a:78:16:77:35:5e:30:1f:34:c9:f2:21:cf:
                    72:07:e5:32:6a:d3:f6:f1:f4:cf:49:ca:fc:c7:72:
                    b3:45:fa:d7:3c:87:99:44:67:85:da:69:ff:57:73:
                    ff:f6:cb:e0:00:07:50:ce:f6:ad:68:d9:28:cd:a4:
                    17:29:9f:3a:d1:f4:13:81:a3:63:77:1c:34:17:73:
                    db:5c:c8:42:93:69:da:cf:19:fc:db:9a:cc:a6:d1:
                    ba:4b:ed:b9:ce:9f:1a:63:49:64:e3:55:c3:da:e3:
                    9e:27:3e:4e:f5:68:e2:51:92:5f:a0:82:0a:ec:19:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CD:2C:2A:B8:B8:FA:63:DC:0C:CD:13:1B:91:A6:26:49:42:6F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab54be68-d429-35fd-a9ff-195a9ebb8468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:97:e3:e8:12:df:ee:82:93:01:29:fc:a7:6f:36:c6:c0:
         f1:73:a9:72:e0:1a:85:ed:fa:06:09:33:eb:b0:39:13:4b:c6:
         62:04:89:1f:53:77:26:b2:ba:b9:ba:c7:ab:a4:67:89:b7:e4:
         76:fe:46:5d:d7:da:f4:ce:1e:cb:18:82:89:01:cd:a6:c1:8b:
         f1:04:a4:3f:43:3a:46:88:67:6f:d1:be:e4:08:c1:65:7f:ec:
         62:c7:e2:11:b9:d7:9d:2d:22:a4:46:10:33:fa:2c:17:90:ae:
         9a:44:ec:f2:5a:e1:45:ee:63:1e:5f:e7:d2:e8:bf:7a:7b:08:
         d9:94:f9:62:f2:71:47:1c:09:3c:6b:31:92:97:d2:37:ec:c8:
         49:ce:6f:91:90:4f:5f:b2:32:f7:53:58:94:9d:20:24:26:0c:
         83:2c:97:22:a6:4f:9a:4d:74:12:67:ed:c3:6d:52:f7:21:fc:
         90:de:72:97:cb:dc:14:51:03:ba:d5:f4:63:cd:93:d6:98:cc:
         09:6c:04:5c:99:2e:3f:56:29:25:e0:1a:55:f8:92:49:bb:9f:
         fb:5d:c0:5f:97:07:f9:b1:ab:77:ee:cb:9d:90:75:d8:07:a8:
         08:18:55:be:e7:a8:b5:2a:36:02:6a:91:50:a1:72:2b:ac:dd:
         09:62:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:26 2026 by rpki-client