Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa
File:                     c1af0d98-c4d1-384a-8894-45598f95da0b.roa (raw, json)
Hash identifier:          mxtx9PI4lQns3QrL3PYzNPfnsiXkN61CMmCz7+gKtsM=
Subject key identifier:   AA:FA:29:1E:8C:71:F6:13:76:47:50:D5:33:91:C8:14:28:36:83:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C79DDAB1BBB6B4A268680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396609
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:79:dd:ab:1b:bb:6b:4a:26:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9925c12e-2155-46de-b78f-8059940bc50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:f1:6c:a2:17:c4:40:a5:7c:7d:8d:db:bb:
                    6a:18:3e:39:9f:c3:07:c5:2f:cb:91:5d:2d:03:a1:
                    64:f9:84:74:4c:76:2c:68:ed:be:cc:fd:18:a5:e0:
                    71:f3:6a:03:dc:c1:2c:cd:99:20:35:88:38:de:e5:
                    80:84:2e:c3:4b:72:93:88:68:6f:cc:27:cd:86:72:
                    6b:5c:ed:af:1e:c1:42:10:fc:4b:6b:fd:88:f5:a6:
                    09:fd:28:85:2d:d4:8b:80:b0:73:94:85:f9:9d:fa:
                    ad:9b:07:bb:bc:0f:b1:9a:4c:93:22:ae:5e:74:31:
                    7d:ec:cb:f9:31:3d:e7:1c:c3:44:76:a7:11:26:7a:
                    a1:ba:97:80:81:48:e7:d5:8e:2f:c2:7a:f8:e3:26:
                    21:50:48:60:4b:08:9d:6d:ed:e8:74:30:ca:a6:33:
                    29:c6:8b:d6:b3:a6:48:12:be:a0:22:27:f2:4a:cb:
                    51:7f:c5:2d:89:9e:19:c7:94:3e:41:80:ed:5c:05:
                    29:03:24:c4:c5:e5:d0:5f:7e:c8:d1:0c:82:68:ab:
                    89:56:b5:10:25:93:42:02:a5:5b:33:b8:b9:49:ac:
                    f0:83:ab:82:d5:b7:07:8e:f5:13:ce:5e:3e:da:67:
                    35:39:a4:38:9d:64:03:aa:ce:cd:4f:8a:c1:03:cf:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:29:1E:8C:71:F6:13:76:47:50:D5:33:91:C8:14:28:36:83:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:db:bc:60:cc:50:4b:b2:55:99:6a:0d:ff:a0:c8:44:0c:08:
         d9:66:63:ed:9b:ea:23:4b:f3:66:7c:68:7f:82:df:74:54:99:
         66:24:0c:a8:7a:67:0d:12:e9:bc:49:cb:ca:36:11:70:c5:2d:
         b4:85:59:3a:d7:5e:40:9b:1e:7a:53:34:6e:be:cb:42:6f:fe:
         3d:2d:a7:c9:d9:c6:12:71:38:db:1b:1e:81:41:82:26:68:c5:
         39:d3:7f:04:e6:06:e6:cb:3d:15:fa:11:f2:89:8c:89:c3:4b:
         b3:5a:5b:e6:3c:bd:36:8d:08:e6:1f:44:75:4c:d0:57:68:ac:
         0d:f8:62:f3:02:a3:2a:03:9a:39:3a:6f:df:0c:03:47:07:8d:
         25:5b:14:8d:88:7c:67:ec:25:49:fa:fa:96:74:ab:f5:36:f0:
         2a:cc:40:23:29:94:02:b6:de:77:45:87:bd:80:67:02:b0:5c:
         43:37:75:9e:8a:09:0e:2e:5a:52:b4:da:b0:6d:0c:a6:04:78:
         87:a7:24:98:7c:64:21:f2:05:bb:8e:03:89:53:92:13:99:0d:
         80:be:95:ee:aa:52:63:ab:45:5d:08:61:c1:f3:55:fe:4f:04:
         b1:cf:7a:1a:ca:40:8f:c8:18:77:c9:0e:d4:46:67:a9:c4:41:
         70:4a:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:39 2026 by rpki-client