Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa
File:                     f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa (raw, json)
Hash identifier:          lwsyjRC2h9F0R2AXDGkKSsDYz5hYyaq9j31zUWR7s1E=
Subject key identifier:   DA:D4:56:80:C7:8A:0E:44:1F:54:16:CB:A2:F4:56:CA:A2:BD:89:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0700919DC4C00908B2FFB980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396540
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:91:9d:c4:c0:09:08:b2:ff:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=488a1774-00b5-4898-b543-8cf7b68d7a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:48:04:f2:25:fe:fd:ec:e3:2c:90:d4:e1:
                    86:24:84:d8:f0:73:4a:75:67:03:23:00:62:79:52:
                    f6:18:a4:7a:83:03:00:c4:a1:72:eb:96:b2:6b:27:
                    cf:c3:77:6c:ec:bb:42:f2:25:37:c9:30:ed:90:f3:
                    44:5c:9e:5e:4d:14:c1:f3:11:7c:f8:62:4a:3f:53:
                    85:25:0a:b4:6e:1b:8b:88:92:01:6b:bf:ce:fb:cf:
                    ce:b7:cd:ee:27:14:68:40:77:4f:c3:06:19:47:1e:
                    70:8d:98:3b:5c:55:b3:ab:47:d1:04:de:e4:ab:bb:
                    72:fc:4b:f2:81:b1:d2:ab:69:78:76:6a:23:23:b4:
                    9f:2e:8d:0f:7c:c6:0c:19:ec:8c:1b:e2:6f:f8:5d:
                    08:f0:53:7d:5e:7a:ac:f7:cc:31:df:a6:33:ce:fe:
                    a3:0c:dd:70:2f:90:bb:9f:91:1d:47:da:21:d7:17:
                    2d:10:ea:f1:0a:c6:dc:b7:25:b1:97:70:2a:60:e6:
                    7c:1d:bb:46:41:3d:9e:17:e4:3f:67:a8:e4:63:05:
                    31:56:7c:46:73:6c:58:cc:75:bc:e4:77:9e:b3:e6:
                    a0:c6:0c:67:ac:6a:a4:f5:d6:49:c8:b5:ed:ce:1b:
                    f6:a3:01:96:ea:32:3c:46:9f:74:72:01:b2:09:61:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D4:56:80:C7:8A:0E:44:1F:54:16:CB:A2:F4:56:CA:A2:BD:89:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:80:60:4d:c3:84:8f:84:96:f7:25:8b:1c:b9:52:28:e5:e5:
         59:0b:63:b5:13:42:b9:8c:7e:63:db:01:00:a0:8d:e7:2f:4f:
         80:b9:19:4c:43:f6:28:b4:6d:19:b7:a4:ab:91:a4:f2:91:a1:
         bb:87:3e:48:3e:6a:0a:18:09:55:3e:6a:44:aa:ae:89:17:18:
         8f:c8:8d:eb:b9:2b:8a:b7:e5:df:4f:33:9f:41:53:ae:68:7e:
         aa:2b:8d:f3:b6:c8:1c:77:5e:15:51:0e:e4:3b:09:4b:e5:c6:
         b5:81:ea:63:62:96:1c:15:13:7d:db:ec:f9:55:b6:c0:a1:c1:
         ee:42:be:98:15:ff:18:4c:8c:cb:33:93:6e:3f:90:7e:0c:04:
         67:91:da:7f:6e:90:a8:5e:3a:70:79:31:9b:9d:da:59:82:15:
         ba:ac:cb:5f:51:ce:bc:b1:d8:21:fb:95:53:94:62:e1:da:1e:
         a8:cf:41:a2:79:8e:f1:5f:9d:85:ef:13:38:ec:94:0d:63:dc:
         5b:7f:2f:59:7d:d2:e2:4f:7a:04:b7:98:75:e9:c5:c9:5a:f2:
         28:bd:fa:34:09:8a:22:73:b2:37:c8:1f:5d:37:bd:84:63:45:
         e2:fe:0a:14:33:08:a1:7f:a9:58:9c:19:e9:8d:19:5c:c7:fb:
         fe:f2:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:13:08 2026 by rpki-client