Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb582bf6-f7dc-3095-b8eb-73b39656913d.roa
File:                     bb582bf6-f7dc-3095-b8eb-73b39656913d.roa (raw, json)
Hash identifier:          hey/FUdkrvKKj8rLxSvcj8EiECudJn2OxrAE/qZoisw=
Subject key identifier:   50:5B:62:DE:2B:82:6C:9C:DA:41:E1:F9:BD:50:63:46:68:5F:34:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E4446D4565B1D7CF2511400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb582bf6-f7dc-3095-b8eb-73b39656913d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396827
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:46:d4:56:5b:1d:7c:f2:51:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=fac52e9e-32a0-4985-a0c4-4ecd9d994a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:62:70:25:cd:ba:ba:79:5d:54:b7:4d:b2:
                    b3:30:e1:f5:c6:80:f6:64:c0:5e:2c:a4:99:b9:95:
                    a7:bc:70:2e:d6:a2:92:b5:ea:74:98:df:b1:5c:42:
                    8f:20:f5:8f:af:01:83:be:36:4f:19:61:8e:cd:cf:
                    35:e1:86:37:bf:a2:e2:a4:a8:16:d5:e9:8c:71:a2:
                    f8:b3:c9:9a:1e:1d:d7:f7:6b:99:a1:8d:5b:b0:06:
                    83:84:10:e7:4f:98:54:2a:25:c4:9f:d1:7a:a8:e7:
                    f6:3e:25:90:49:da:3c:c1:c2:01:eb:28:9b:75:14:
                    35:9c:51:dc:9b:f1:fa:9d:d0:b6:08:9a:ea:cc:e8:
                    4e:51:ac:7f:34:41:c7:fa:5c:f0:a1:dd:9a:04:cb:
                    29:4b:15:79:90:2a:b1:04:55:e6:36:7c:6c:1a:99:
                    5f:aa:8a:c3:91:06:c2:f2:20:dd:64:8f:1c:0d:f5:
                    48:fa:90:4e:12:be:f5:a8:76:3e:c3:ad:58:d0:ee:
                    01:9d:66:bf:88:18:3a:15:78:dd:89:ac:e3:97:b9:
                    25:1e:c5:7e:b4:ae:64:7f:9d:9c:b3:68:c7:0c:9d:
                    c6:bb:cc:9e:2c:d2:73:74:01:d8:b9:cb:cc:ce:13:
                    7f:88:b2:4b:94:02:ac:28:60:63:e1:01:cf:79:d2:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:62:DE:2B:82:6C:9C:DA:41:E1:F9:BD:50:63:46:68:5F:34:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb582bf6-f7dc-3095-b8eb-73b39656913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:e7:91:10:0a:d1:c1:2d:d0:6d:7c:5e:bd:95:c0:db:ab:
         cb:cf:64:8d:4f:02:8b:b8:df:fc:d3:87:b2:99:48:d1:b7:fd:
         1b:6c:ea:70:9c:a4:ab:71:b1:9a:e8:16:50:28:bb:fb:23:55:
         06:b8:b9:15:a3:2c:91:31:8d:b5:47:2e:4b:ce:22:2a:03:2c:
         77:6c:01:8c:47:73:50:90:f3:fb:d5:d0:17:8e:54:5d:38:e1:
         d6:2f:49:c8:86:f8:31:5d:0f:5a:09:1d:7f:96:07:86:0c:81:
         f9:ef:8e:2f:1e:00:c8:49:e6:1d:97:a3:8b:7a:36:cf:fe:fa:
         96:e9:72:fc:75:9e:b5:a3:d0:5f:1b:76:a4:09:c3:13:18:bf:
         b3:27:ca:3e:80:94:67:9c:76:d6:0c:b1:f2:a7:a7:dc:d9:cc:
         a8:f4:a2:f3:fd:56:73:94:12:5c:4d:61:3c:3a:e5:17:9c:3d:
         21:5b:7c:3c:6f:ef:1d:fa:be:82:99:2e:36:ce:d2:78:d0:92:
         08:50:07:ce:87:e7:ed:85:ef:1a:40:76:6c:11:11:32:97:53:
         2d:b9:e9:f8:56:93:1c:c7:ad:49:8c:e2:8b:72:a5:58:49:58:
         18:ed:a3:8b:4d:71:26:36:fb:e3:fa:f6:d4:5c:aa:9e:11:1a:
         ef:7b:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:23:27 2026 by rpki-client