Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa
File:                     c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa (raw, json)
Hash identifier:          /6rniB0+uYluCKZufYX2KnPeH6PtE62dQypIa1Ro3Ow=
Subject key identifier:   F5:76:9A:D2:D0:D2:0A:DD:29:86:F5:C7:33:5D:D3:FB:82:6C:3C:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3C9748B06B2A25B500E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     36630
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3c:97:48:b0:6b:2a:25:b5:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=320bf163-dd85-449c-9abf-049c57e70871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:c2:e2:43:83:14:11:f5:92:62:5d:ae:e0:
                    20:15:70:4d:0e:0a:cd:bf:81:84:36:bc:92:e7:be:
                    bc:1d:4d:ce:52:51:24:3a:af:c6:f3:bf:40:f1:24:
                    fd:d0:d0:e6:1f:4a:62:d7:20:cd:2f:1b:30:11:63:
                    ab:af:45:5c:91:69:bf:58:43:f5:bf:fa:d3:84:86:
                    33:fd:10:80:b8:b0:0a:0b:d5:bd:05:87:1a:08:03:
                    2b:65:cf:ef:21:3e:94:f2:2a:de:cd:c9:7f:c9:dd:
                    26:c5:d8:15:67:35:3b:c4:c5:30:1c:69:39:9b:44:
                    ed:81:f4:8d:40:7c:c6:c0:b0:60:14:da:3b:0f:35:
                    f8:68:f8:5d:84:0c:c0:ba:98:dd:47:cf:c8:e1:ba:
                    32:a3:90:47:59:08:82:41:f8:69:0e:ef:e6:2d:81:
                    5c:44:fb:6c:e7:f3:38:2f:6e:c5:f6:40:f7:97:d3:
                    33:cb:e8:61:dc:69:21:df:73:a2:ea:5f:8a:d1:aa:
                    23:c2:de:4c:0f:03:16:9a:aa:82:6c:f1:90:0b:55:
                    6c:a3:d7:a2:c6:d6:84:6a:97:f3:2d:dc:3a:7b:33:
                    cb:65:d1:18:c7:64:b5:55:08:00:f7:b2:ab:10:ee:
                    71:41:d4:04:e2:5d:21:97:e3:96:b9:88:13:d8:70:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:76:9A:D2:D0:D2:0A:DD:29:86:F5:C7:33:5D:D3:FB:82:6C:3C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:70:fd:35:93:2b:1d:94:3c:af:be:2a:cd:0f:2f:37:ec:
         c6:cc:88:fd:63:3b:d0:23:9e:96:48:42:35:a9:e0:16:e1:1d:
         37:77:69:71:d2:2b:f6:42:10:97:99:49:38:4b:83:1e:90:59:
         55:f8:b6:99:3b:e9:ae:69:8f:8e:bf:84:15:eb:e7:33:ea:31:
         62:06:ee:f9:fb:05:61:42:ad:fc:4e:ae:d6:ca:72:a6:93:57:
         8f:07:4c:d1:33:4f:09:db:eb:2c:ef:5f:63:7d:b2:df:0e:53:
         bc:a9:66:29:a0:b4:4a:ce:39:7f:cc:bd:19:dd:7a:7e:28:13:
         ad:0c:eb:77:03:5f:b0:66:1b:b4:b7:7c:84:b7:79:bc:ac:a5:
         78:3f:66:d2:f0:18:37:69:f2:7a:e4:bb:ad:9c:7a:0b:92:94:
         01:16:de:8e:d7:6f:10:f7:1a:62:92:58:54:48:89:85:80:b5:
         b6:09:56:70:07:df:02:ef:19:be:fe:61:a3:27:43:28:62:44:
         a6:f5:44:de:c9:0e:48:1d:19:54:19:35:3d:23:69:e9:a9:59:
         33:91:cd:64:6d:d6:ff:68:08:51:7b:14:80:87:52:84:fb:1a:
         f8:66:e3:41:a4:8c:3a:ce:a4:12:5f:11:76:7e:21:da:88:2d:
         9c:7c:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:43 2026 by rpki-client