Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68645e8-59b2-3367-81f7-58ba79ef64a5.roa
File:                     e68645e8-59b2-3367-81f7-58ba79ef64a5.roa (raw, json)
Hash identifier:          sHh3Slv7hK/5PCfm65EGDXcOEIfb/8aTUGoMyhI5Yo0=
Subject key identifier:   D9:6E:ED:D7:F0:77:A8:E5:7C:5B:AA:9A:88:9C:E1:92:4B:0B:5C:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1D7A99297B97F34272B9A570
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68645e8-59b2-3367-81f7-58ba79ef64a5.roa
Signing time:             Tue 09 Jun 2026 14:13:58 +0000
ROA not before:           Tue 09 Jun 2026 14:13:58 +0000
ROA not after:            Mon 07 Sep 2026 14:13:58 +0000
asID:                     396564
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:7a:99:29:7b:97:f3:42:72:b9:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 14:13:58 2026 GMT
            Not After : Sep  7 14:13:58 2026 GMT
        Subject: CN=634ded92-0367-4d13-8e3e-6fcd570c90d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:e3:4b:a1:21:67:d0:54:55:22:40:c0:65:
                    3e:63:03:7c:03:8a:93:3c:ce:7a:58:dc:9a:9f:5e:
                    0c:ca:de:b0:53:0f:08:7c:56:0c:b0:fb:e0:e0:7e:
                    35:ed:4e:8f:bc:56:2d:eb:06:09:54:7b:90:00:0f:
                    d5:0f:b1:e3:4c:77:2b:4e:db:c4:31:ff:be:79:ac:
                    1d:5d:2b:ac:d3:81:1b:6a:ea:86:7e:b3:76:31:38:
                    bf:50:e3:bc:17:8c:4c:8d:b7:6e:c6:d0:a4:51:23:
                    b6:1e:ec:8c:7d:fe:21:41:4d:29:f0:7f:18:56:4c:
                    b6:03:2c:fc:b8:8a:c5:be:12:da:43:76:80:cc:35:
                    d3:51:c2:c3:b8:9e:d0:c2:a9:26:a4:f6:f6:45:d3:
                    0e:22:d5:f1:f2:c5:0e:fa:81:d5:35:d0:26:b5:be:
                    eb:d0:d0:4a:d4:8a:1f:12:eb:39:79:75:f9:57:97:
                    f6:86:37:c7:26:a8:e2:6c:92:99:8c:1d:c0:e1:96:
                    7b:6f:61:24:ed:14:a8:cd:0c:29:7a:86:ab:e1:97:
                    1a:d4:cc:8e:8a:37:6e:3f:34:8f:51:5a:8e:1e:fd:
                    46:ee:cc:6b:3e:cf:25:ea:28:7f:89:10:7c:b7:02:
                    43:04:f8:60:83:81:fb:0f:5a:69:08:2a:b3:1e:18:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:ED:D7:F0:77:A8:E5:7C:5B:AA:9A:88:9C:E1:92:4B:0B:5C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68645e8-59b2-3367-81f7-58ba79ef64a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:df:a4:aa:49:7a:13:a1:45:ae:e3:02:95:c3:5f:80:c3:94:
         0c:e4:89:92:f3:31:0e:51:06:da:15:80:28:f2:80:34:6b:a1:
         00:c4:33:cb:67:17:38:f3:be:13:68:ff:c8:02:27:92:6f:5a:
         d1:e3:86:4b:e5:6c:d8:50:fa:10:83:a2:f0:98:c2:09:32:05:
         f1:32:ca:52:b0:65:9e:a5:15:ed:f6:b0:5a:7d:73:e1:0a:e9:
         bc:b4:f0:e0:64:a4:f8:5e:5f:79:d6:ab:0a:ac:d1:ed:1e:c9:
         1a:6a:08:b5:16:a7:dc:57:5c:0b:c9:ca:77:6f:95:ae:24:8a:
         14:ee:91:4f:76:3f:6f:6b:0d:12:62:19:73:f0:b8:0e:c4:35:
         f5:e5:ee:44:55:2b:ae:73:ce:fe:31:15:be:b2:ed:1b:e0:7f:
         0e:fa:bd:88:8c:eb:16:22:80:28:eb:83:d5:9a:29:a4:fb:ab:
         49:29:22:86:eb:b8:bb:7a:4f:79:07:f9:ea:d4:20:9b:8d:52:
         28:9e:87:83:3f:a4:63:6e:de:5e:f0:61:25:35:cf:2d:0d:19:
         2c:6f:23:85:bc:bc:3e:17:23:f2:a3:ea:0a:ee:67:fb:cc:6c:
         6a:a2:ba:c5:f5:57:67:9f:aa:02:2f:40:c5:d6:09:09:0e:6f:
         c1:ba:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:34 2026 by rpki-client