Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1671a72-a5c7-3cd8-aa81-f9b916ecbfdc.roa
File:                     c1671a72-a5c7-3cd8-aa81-f9b916ecbfdc.roa (raw, json)
Hash identifier:          LK1XTQeELSg0JlAL/5f/XiuJL0nZtYWyXgT7fqBnRS8=
Subject key identifier:   58:C3:28:54:F5:9B:F4:B1:A7:E2:5C:0F:55:AC:34:19:5F:5D:73:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E22744A58473587F729AD05C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1671a72-a5c7-3cd8-aa81-f9b916ecbfdc.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     27544
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4a:58:47:35:87:f7:29:ad:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=31f07321-712a-40e5-8fa8-5848262fb589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:53:8f:b1:14:b6:cb:82:c1:a4:71:30:fb:
                    69:7b:e3:41:b1:68:eb:26:0f:a3:dd:61:f4:13:9e:
                    96:d8:09:37:76:f4:a8:53:29:70:4f:87:d5:a9:98:
                    06:2e:73:bf:71:48:00:d2:0f:13:e2:48:90:af:e6:
                    9e:65:50:02:9b:94:a1:16:a3:98:c1:9f:e3:7e:86:
                    d2:ec:ea:ee:86:3d:95:b5:b7:27:62:93:8a:25:70:
                    41:fd:3f:2d:ac:2c:d8:42:6d:31:16:1c:67:35:41:
                    af:5e:3c:a2:42:88:8b:d9:1a:a8:35:15:57:2a:0c:
                    45:8f:99:75:8e:74:2e:24:24:27:38:6b:58:e7:1e:
                    0a:b5:f3:20:51:ca:17:20:d5:ee:ee:f2:7e:f1:95:
                    3a:59:1f:c8:01:ec:7e:a3:be:0c:a5:c5:d7:47:a6:
                    f0:b3:bc:61:e2:54:5e:ed:02:9d:8b:46:5c:cd:b5:
                    6b:16:96:82:96:8d:0a:20:86:b6:1d:6f:e6:23:68:
                    ef:c7:02:3c:2d:72:da:d2:c8:bd:9d:b4:e1:47:c2:
                    7b:53:e0:06:60:7b:4d:0e:63:83:6c:7d:8a:8e:07:
                    78:11:1f:4b:3c:7c:df:4b:86:aa:29:9d:51:29:30:
                    6c:99:f0:4d:ef:f8:7b:b9:78:46:1e:82:fa:3a:1c:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C3:28:54:F5:9B:F4:B1:A7:E2:5C:0F:55:AC:34:19:5F:5D:73:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1671a72-a5c7-3cd8-aa81-f9b916ecbfdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:68:40:4f:83:de:8c:32:9d:7d:6b:da:c7:a0:48:cf:85:
         c1:36:3f:74:63:ff:23:02:72:ce:22:28:4e:57:66:df:ca:55:
         52:86:71:2f:53:15:6e:d9:c5:3a:e5:be:5c:6a:4f:df:72:fa:
         6d:57:82:c7:5a:91:44:dc:df:87:1d:f1:fe:98:63:90:00:a3:
         14:67:77:e9:d7:9f:fe:59:67:1c:dd:75:c7:d4:88:a7:8a:14:
         e2:19:b9:19:99:f3:16:fa:a6:8c:ff:2b:77:05:ce:f6:78:a5:
         85:31:34:4c:77:db:83:0a:d8:48:3c:3c:95:28:ec:dc:cc:ef:
         18:5c:79:ac:e4:ea:29:b6:74:2f:c2:29:c2:6a:8e:3f:a2:57:
         77:e5:06:df:ab:d1:43:53:cf:4b:59:51:91:96:e5:c3:ab:c8:
         ee:9d:ec:68:86:34:29:3e:f3:06:81:3d:2c:09:90:76:41:ae:
         85:e5:05:46:21:78:e9:f9:6d:97:cb:18:ce:4d:e4:a8:90:08:
         92:05:9e:0c:84:70:fd:36:86:a8:35:d3:4d:f1:74:b9:0c:88:
         cd:17:91:04:a0:6e:68:ad:4c:4d:7f:d6:af:ee:62:a8:e5:57:
         47:55:5f:39:5a:30:4e:5a:39:ff:d2:75:08:29:db:12:cb:d2:
         20:1c:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:19 2026 by rpki-client