Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd436b8c-f12b-324c-aa4f-ba9ddd4448eb.roa
File:                     cd436b8c-f12b-324c-aa4f-ba9ddd4448eb.roa (raw, json)
Hash identifier:          d7UMIL7iHpOq1Qe3p25Qq56dttWjAjm7il/jEDrgqjQ=
Subject key identifier:   7D:36:7F:98:A8:AF:01:4E:9F:28:78:B5:13:43:D8:4A:D6:74:A0:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1D7A98ADE7165713BAC3B640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd436b8c-f12b-324c-aa4f-ba9ddd4448eb.roa
Signing time:             Tue 09 Jun 2026 14:13:58 +0000
ROA not before:           Tue 09 Jun 2026 14:13:58 +0000
ROA not after:            Mon 07 Sep 2026 14:13:58 +0000
asID:                     396567
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:7a:98:ad:e7:16:57:13:ba:c3:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 14:13:58 2026 GMT
            Not After : Sep  7 14:13:58 2026 GMT
        Subject: CN=ddfa163e-5d8c-4716-8c80-a8bb1a5eb80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:d7:58:3e:56:1d:6b:ef:0b:c8:e6:37:e8:
                    07:98:1d:3b:33:75:e7:16:df:1a:0e:08:9e:8a:c2:
                    0b:b3:94:89:02:41:e8:0b:a8:79:f9:3c:58:ce:3d:
                    4e:b3:e1:28:46:8e:84:cc:d8:67:53:57:ea:a0:c0:
                    a9:05:53:da:b7:34:4e:43:b8:ee:ea:5c:41:10:e3:
                    c4:51:1f:ec:f9:64:13:c2:c3:f9:a9:c2:6f:e3:02:
                    e8:c1:7c:ea:1f:0f:23:bc:10:e8:39:d4:2f:31:53:
                    19:dc:7e:07:4c:e6:57:40:77:5d:94:d9:7c:1c:17:
                    0d:2d:dd:31:c0:d3:a2:0d:7a:f0:b4:3e:83:9a:84:
                    6a:57:57:70:50:72:9c:cc:9f:f6:07:13:47:e9:88:
                    78:6b:c3:0c:5e:49:f2:16:8f:74:7b:96:19:30:09:
                    e9:29:3b:7c:8e:45:17:87:24:0a:f9:0f:43:da:11:
                    16:0e:a0:5d:30:e1:e5:16:a3:6e:45:6e:3a:fa:97:
                    8e:48:62:f9:6f:1f:0b:5d:58:0e:79:a9:35:d8:87:
                    a1:2b:b7:ff:fa:f6:b0:b5:ea:f6:50:13:1f:2f:73:
                    2a:8b:7f:f5:68:01:ef:b7:e5:d9:3b:ec:75:64:2c:
                    56:6d:47:bc:e9:b8:3d:55:62:b0:36:58:f8:17:b1:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:7F:98:A8:AF:01:4E:9F:28:78:B5:13:43:D8:4A:D6:74:A0:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd436b8c-f12b-324c-aa4f-ba9ddd4448eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:4c:dd:e7:28:0c:4a:93:65:16:8e:52:0c:50:34:c8:bc:
         96:ca:9d:53:a9:7a:f4:15:36:c7:80:7e:bc:42:12:67:e6:9f:
         73:48:3f:80:3f:e2:9f:21:c4:b4:fb:f7:89:15:46:54:e8:f4:
         12:43:55:43:31:a1:c9:94:88:77:8e:95:74:46:bc:b9:cc:99:
         6c:e1:d2:4c:28:74:07:9a:01:27:c4:77:e9:1f:6e:a3:c3:a5:
         48:f3:6e:58:e2:89:45:fd:c3:d8:0a:8b:e1:eb:ff:93:d8:dd:
         ee:16:33:69:ef:44:fa:8e:ee:2f:11:8a:6f:a0:4e:78:bc:0f:
         3b:7a:99:f4:91:d7:90:de:e7:13:79:8a:4b:90:41:97:b7:4f:
         be:ef:0a:36:69:20:8f:5e:3a:07:d9:7f:c4:4a:b8:8e:bd:e2:
         9f:d0:8d:4d:7a:d2:2c:50:68:da:46:e2:e2:78:4e:88:2f:aa:
         06:ef:46:29:b4:9b:31:fb:cb:c5:cd:27:86:56:59:dc:11:00:
         68:81:06:a0:ab:b4:3e:32:c8:85:08:ae:e8:6f:62:9e:23:78:
         92:d5:2a:03:0a:96:bb:1f:9b:62:03:35:9d:bf:e9:b1:1e:5f:
         34:45:b4:42:7c:02:b4:fa:7a:9d:4a:02:56:f9:ba:9b:6c:88:
         4e:6c:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:29 2026 by rpki-client