Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa
File:                     b20df32c-7816-3e41-bf02-fd513a7ac378.roa (raw, json)
Hash identifier:          7e3T2rxB8aIVlY0rsNEemu6hrsnk6+nXE8yL7e9Qlr4=
Subject key identifier:   E5:67:93:76:4F:D6:A5:8D:6E:56:B7:39:39:D6:DA:1F:4E:F0:EB:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E44405BABDA102BBCB7E280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36624
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:40:5b:ab:da:10:2b:bc:b7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=816e38c5-d64b-46d6-ae4b-23f30018da11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:3b:5c:ea:10:6c:52:39:ad:7b:af:ce:35:
                    71:50:c5:4c:5d:33:10:b1:d8:69:af:51:97:c9:df:
                    d9:b7:13:74:ae:97:a0:dd:92:16:f7:64:26:d0:7a:
                    98:3b:0e:f9:06:54:c2:3a:68:b8:c7:ec:6e:f2:53:
                    14:71:55:7e:1b:0c:12:c3:2b:7d:a7:61:73:34:64:
                    cc:0a:a1:cd:a3:f2:58:65:33:71:66:3e:f6:45:f6:
                    e9:bf:2b:36:f3:a4:ef:f2:2d:81:77:5c:0e:f2:18:
                    0b:07:e6:c2:3e:d2:26:2a:03:b0:e4:d6:f6:46:da:
                    bf:a7:6e:7c:96:5a:23:6c:23:c5:ea:c0:c0:fa:4f:
                    b3:95:e7:43:2f:7e:2a:da:78:59:22:0d:b3:93:64:
                    e0:db:8b:d1:09:45:11:3a:d3:0c:dd:6f:e7:9c:1b:
                    07:b3:91:34:94:32:0f:55:a1:a5:a7:fc:2e:44:4c:
                    26:46:fa:d4:a4:7e:56:ef:fb:cd:54:92:4b:df:13:
                    b4:4e:c2:3c:ba:75:4a:4f:a8:95:1d:4f:aa:5c:a3:
                    05:37:c0:51:64:dc:13:d7:e6:98:05:39:07:ec:51:
                    e6:46:d4:b4:ed:ab:3f:08:d7:a7:0f:00:28:a2:bc:
                    f1:36:3d:f0:72:63:41:39:04:f0:b5:a7:ad:cd:1f:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:67:93:76:4F:D6:A5:8D:6E:56:B7:39:39:D6:DA:1F:4E:F0:EB:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:87:2e:75:8f:ea:49:b0:d3:a7:88:07:89:f8:6e:72:4c:
         0c:58:5a:27:7f:9e:a5:1e:c2:9e:94:98:ac:26:6b:a9:ff:cb:
         1b:0e:3c:9c:c0:bb:06:7c:e9:5b:ca:ed:90:4b:32:6b:7b:96:
         22:8a:41:01:01:1e:92:9c:48:5a:17:b1:41:72:be:8c:3d:8e:
         30:67:36:21:e1:ee:7e:5c:44:65:38:42:d0:d2:1a:06:7d:14:
         77:ee:74:63:26:c4:e9:b3:f2:07:e1:45:c6:39:2f:ba:b8:ae:
         9d:fb:30:71:cb:b4:c4:b0:85:b4:ac:f4:dd:2e:d5:27:a0:40:
         c3:2b:b6:3a:2e:a9:3d:ac:c6:74:d6:9f:32:df:37:21:e2:0b:
         97:81:43:22:e5:70:7b:0e:d4:89:35:1c:7c:64:01:4b:c7:b0:
         cb:c4:28:92:47:a4:d3:f3:47:79:33:16:2d:ea:56:a6:2a:6e:
         f8:91:51:1c:03:70:ab:0f:a2:15:0f:e1:39:e6:08:55:b8:07:
         75:67:8c:3d:10:98:58:3c:29:f5:3c:76:c4:6b:1e:79:c0:aa:
         da:33:cd:4c:10:5e:f1:2f:d5:fd:26:61:bb:20:fe:42:44:b2:
         9b:56:5a:6a:70:a8:63:ac:41:b8:b7:65:9f:cb:e9:95:9d:dd:
         0e:b6:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:30:47 2026 by rpki-client