Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77b27ce-d8de-3879-9a90-b91448b0ff7a.roa
File:                     c77b27ce-d8de-3879-9a90-b91448b0ff7a.roa (raw, json)
Hash identifier:          oDZa124lgdlXSSU/4a1Jcn7nTJrXi3Z4IDFuANhCFRU=
Subject key identifier:   B9:D0:74:6B:5D:3F:00:08:31:75:27:6C:C1:27:5F:8A:B7:B9:F8:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00063331B0CDD8ECB9F46200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77b27ce-d8de-3879-9a90-b91448b0ff7a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20431
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:33:31:b0:cd:d8:ec:b9:f4:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=4df56c58-fe54-4ace-95c2-006ec1cb6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:4f:16:21:8f:77:92:c7:c2:1e:b7:1a:20:
                    bc:a1:4f:29:2c:d7:b0:3a:f7:e8:fe:3d:72:99:db:
                    72:4e:41:fa:10:11:b3:9a:24:8c:48:ce:33:88:c5:
                    87:8c:e0:33:d8:86:7c:2e:3a:e6:3d:aa:b0:1a:ef:
                    41:9e:0b:92:bb:30:b1:5c:01:5e:b5:31:27:ba:dc:
                    71:18:35:74:f1:be:23:de:13:a4:2a:eb:d2:20:6a:
                    a9:1b:e2:2a:3a:94:5a:f2:ec:7d:4f:8d:b0:89:74:
                    c9:97:55:f4:8d:3c:45:97:6f:1f:b6:82:cb:86:30:
                    b0:23:28:c0:24:46:1d:fb:78:c3:f2:41:9b:0d:4d:
                    67:37:d6:73:48:b9:32:49:04:7f:e2:eb:db:2c:d2:
                    1e:fd:21:f7:01:bc:8b:b9:5b:c4:82:84:a0:c9:4d:
                    a0:d3:99:98:3c:c4:94:9a:1e:a2:65:d7:47:d1:89:
                    a9:7f:19:21:18:0d:f3:75:93:eb:fd:c6:b4:c1:99:
                    1f:17:b2:fa:6c:32:7b:c6:25:0a:99:f4:18:01:46:
                    82:89:e1:aa:9a:8d:1e:07:21:ae:79:10:04:0d:7b:
                    af:f2:21:bb:1a:a2:42:e6:93:f8:f9:bc:da:fd:d3:
                    d2:01:20:3f:f8:bd:a4:fb:d6:2a:9c:92:42:5b:44:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D0:74:6B:5D:3F:00:08:31:75:27:6C:C1:27:5F:8A:B7:B9:F8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77b27ce-d8de-3879-9a90-b91448b0ff7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:24:3f:33:9b:ab:f6:00:fc:ba:8e:9f:88:2e:ed:cd:62:
         90:e2:2e:22:7a:83:bc:1b:5c:3b:1a:93:1b:f2:36:ff:b9:1b:
         1a:53:46:13:77:3b:48:9c:e0:95:8f:04:7d:12:55:81:9d:a4:
         03:17:12:09:d2:ad:aa:94:7a:b0:b0:84:7b:f9:77:8e:09:e9:
         63:af:01:d0:7a:a6:61:c8:75:53:04:c4:06:05:da:7d:49:d7:
         b7:34:7a:76:10:6e:92:fd:e5:fe:2a:05:95:85:29:47:c7:99:
         ab:50:c6:c1:d2:37:aa:02:12:f8:34:7d:11:59:43:54:33:3e:
         f8:53:21:32:7e:39:30:a0:7b:6e:cb:a9:44:d4:b8:57:46:bb:
         b9:ff:2d:d4:1c:a4:f5:83:d6:45:b5:4f:22:05:5b:e6:21:59:
         7f:f4:ab:ea:c9:21:2a:8d:d1:b9:96:4e:71:85:89:cc:0d:0c:
         28:2b:6a:7b:59:11:8a:37:76:fd:5b:77:f9:8a:60:0f:56:44:
         2a:40:76:d8:74:0b:a2:cb:94:1d:03:3f:2b:7f:05:ed:e1:cb:
         4c:be:6f:47:b8:61:cf:b4:e1:ce:0f:06:1f:a3:66:5e:e3:9a:
         57:85:c0:a0:1f:c4:77:4b:b9:d3:37:3a:5f:35:ec:f5:65:4d:
         7b:c4:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:48 2026 by rpki-client