Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa
File:                     cb7edf51-994b-3739-bf8a-595cd16f5333.roa (raw, json)
Hash identifier:          BDV+OyDLZXBifADBdnTY/21sUWgxIGu0Zc4Tt1suPfs=
Subject key identifier:   16:4D:E3:B9:84:BA:79:95:A6:10:73:0A:55:77:C7:2A:79:4E:82:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0700A250C913CC73B30BAEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     397207
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a2:50:c9:13:cc:73:b3:0b:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=e9d049db-3102-4966-8108-3d6e5d4db7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:88:e7:29:a9:ca:c2:69:ca:0b:84:ba:d1:
                    88:b4:06:69:a1:dc:2e:bb:c6:3a:fb:e6:9c:cf:e6:
                    52:34:b9:09:f1:a9:87:19:e1:0a:fc:2d:91:39:be:
                    86:c8:41:08:72:d9:97:93:b0:06:b2:bd:c0:ed:10:
                    2e:c3:00:27:12:81:10:ec:53:81:b5:e8:8d:31:ff:
                    58:d3:5b:6a:be:42:48:1f:78:5c:08:11:b1:07:63:
                    a4:fe:1a:85:f6:23:21:52:29:c1:ee:29:39:b6:45:
                    33:96:fb:db:7e:cf:b2:97:4e:34:e3:a9:a0:5a:8a:
                    e5:bc:a0:1e:b8:aa:26:d8:b5:3e:7f:1a:60:a7:25:
                    4c:29:73:2f:bb:33:c8:b8:15:61:bc:5a:72:88:28:
                    0c:e6:03:03:31:39:09:6c:1c:29:29:14:31:a2:ac:
                    34:03:cf:e7:72:1d:4c:0f:b4:2d:2c:7f:97:b6:58:
                    d3:34:79:94:3a:46:fa:23:bd:ee:55:74:17:af:ea:
                    b3:28:89:b1:68:7f:26:31:b9:b1:d9:31:25:ca:c2:
                    85:91:55:bb:15:ef:03:5f:0f:95:d5:2d:e6:61:0b:
                    6c:39:af:85:c4:8e:f4:10:33:44:cc:f7:ad:a6:19:
                    11:d0:51:09:76:07:0a:7c:ba:69:e6:75:01:8a:42:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4D:E3:B9:84:BA:79:95:A6:10:73:0A:55:77:C7:2A:79:4E:82:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:4f:f5:e0:d3:32:69:92:33:4e:5a:93:cd:1b:6d:09:6c:
         be:4b:ef:43:ac:45:c4:78:0f:31:e4:e8:8e:c0:71:8e:86:a3:
         f4:d1:22:79:d5:39:e9:52:49:3e:7c:0f:90:14:a3:5d:5f:ea:
         8f:1c:c6:0c:89:02:fc:32:11:e8:2b:58:b5:86:04:36:64:ea:
         a3:e1:15:dc:09:1b:86:9f:60:16:0b:93:eb:a7:a1:a6:4c:99:
         8e:68:66:22:1c:8e:8f:3b:80:73:66:36:9a:f5:40:80:c5:20:
         a8:2e:3e:b3:66:1b:50:67:fc:fb:8e:58:91:a8:85:73:78:b2:
         94:9d:d7:1a:66:ea:bd:e7:50:4a:d7:db:27:99:d7:5c:a1:6d:
         5c:0a:b2:3f:a9:eb:74:14:17:b8:cc:50:64:91:a1:94:c8:d1:
         e9:9c:5e:66:3b:86:71:b6:6a:ad:97:c4:a8:cb:f6:33:0f:e6:
         e4:92:59:10:03:3a:bd:85:2b:a4:2e:d0:0f:3f:d2:cc:d0:ed:
         c7:69:f4:b4:c0:0c:96:06:5c:ed:d5:42:4a:ca:d0:ca:29:69:
         af:e4:77:3a:00:37:b5:51:d9:e3:cf:ed:bf:cf:11:ce:9b:19:
         f2:e8:c8:a0:8c:fe:5c:2c:4c:ab:a4:4d:e0:3d:b1:b7:11:b0:
         9a:d0:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:31 2026 by rpki-client