Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c05b020e-20c8-3a44-bd5a-e1dec345cf2a.roa
File:                     c05b020e-20c8-3a44-bd5a-e1dec345cf2a.roa (raw, json)
Hash identifier:          /mhhWGrzJEs/hDDsabt5SoE8hzukgiKtLoaXKtkOzv4=
Subject key identifier:   58:E8:04:B0:BB:3F:C6:6B:97:89:6F:EF:DD:E4:75:B2:A6:58:C5:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E000635E9C76D21AD51864F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c05b020e-20c8-3a44-bd5a-e1dec345cf2a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     397203
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:35:e9:c7:6d:21:ad:51:86:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7e604f31-3a13-42f6-bd2d-768e6114df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:70:82:86:ea:18:6e:50:a2:d4:12:c4:46:
                    fc:ee:73:0a:08:66:45:b1:79:1e:ea:57:62:77:e6:
                    9f:78:01:42:2a:97:7a:56:50:28:c8:1c:cf:07:8d:
                    72:53:87:1a:d2:bb:72:b7:ec:dd:2a:65:c4:c0:bf:
                    53:f6:7e:df:f9:7b:23:18:1b:3c:0f:32:84:52:b4:
                    63:01:1c:eb:1b:a2:88:86:7c:9d:c3:4a:1a:5d:11:
                    f9:15:24:d1:93:28:b4:87:2b:1c:47:17:b5:55:ce:
                    0a:b0:3a:d1:be:fb:f3:82:5d:6f:ff:84:80:29:49:
                    a7:38:a2:e4:24:01:7a:4c:79:18:31:7e:47:31:5d:
                    07:d4:5c:38:38:81:91:96:26:fa:f2:53:16:7e:b4:
                    eb:36:43:f1:fc:db:a9:6b:ba:c8:59:d5:f7:28:0a:
                    45:0d:77:c8:51:59:6c:2f:ea:46:b2:c3:be:26:a9:
                    a2:4d:56:c9:79:e8:7e:b2:06:99:b5:1f:59:7c:f4:
                    75:68:e5:e3:a5:a4:64:0e:9f:66:72:ae:6d:a2:72:
                    79:ab:94:93:9e:48:0b:5f:bc:03:35:75:46:40:1b:
                    23:a0:15:e2:87:2d:51:2b:e9:40:2d:c6:7d:3d:ac:
                    3c:bb:6f:7a:a3:a2:aa:3f:09:24:d1:1a:02:ba:72:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:04:B0:BB:3F:C6:6B:97:89:6F:EF:DD:E4:75:B2:A6:58:C5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c05b020e-20c8-3a44-bd5a-e1dec345cf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:07:33:fd:5c:64:2c:df:fe:af:41:0d:c9:d9:2c:46:9f:
         f1:d0:e9:c5:3d:e4:1c:d1:6d:a3:3b:af:2c:1c:63:dc:8d:8c:
         45:bb:30:3a:f6:7c:11:c9:54:69:8a:97:1d:fb:16:bf:1f:ca:
         aa:81:ac:6e:e9:87:52:ac:b0:e3:dc:4b:b7:51:8a:29:ea:bd:
         6b:f7:e1:9e:20:96:91:9f:3b:64:46:4c:dd:4c:88:7d:00:c2:
         64:93:93:f6:07:30:0c:90:fc:d6:6e:cd:da:95:ef:39:cf:27:
         27:41:eb:f2:b0:5b:4f:54:ad:e7:b5:fc:26:c4:ec:1a:17:32:
         f8:2f:12:fd:5e:c3:72:28:10:6c:2b:b2:3e:e0:96:a9:4f:06:
         bb:fd:29:19:58:de:b2:d9:e2:72:80:c8:3c:fa:c4:ff:a9:0f:
         75:31:c0:c1:c9:f7:ec:86:59:50:56:f5:dd:c4:f5:3d:c9:aa:
         33:5e:af:05:c0:a6:e2:61:ad:2a:d0:53:0d:03:a9:4c:42:96:
         d9:92:d9:36:80:79:10:88:71:25:37:d9:74:a8:3b:78:1c:61:
         97:78:10:f0:32:a5:28:77:ae:12:7c:d3:8c:35:e5:d1:a4:be:
         50:bf:59:80:bc:75:a8:6e:a7:b2:fe:0f:43:14:db:a4:9d:77:
         a0:27:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:02 2026 by rpki-client