Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa
File:                     2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa (raw, json)
Hash identifier:          tAGD4SGEqA1uMs57UbG/rAWgPpkfHTznVdIEe2PmZLs=
Subject key identifier:   E4:42:B1:14:D6:BC:51:20:81:60:96:04:69:36:CE:4D:F5:CA:FF:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644A93A68C9CDCDFFAF08A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396541
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a9:3a:68:c9:cd:cd:ff:af:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=16ccea7d-f429-4f7a-8ba7-d5710370ae63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:ad:c0:af:3f:3e:5e:aa:35:4f:63:e5:3f:
                    3d:9e:e2:ea:96:a9:28:53:3a:26:a4:5e:f7:30:5f:
                    47:bd:92:15:f5:1a:7b:73:44:e7:83:dc:a7:8f:f1:
                    60:23:24:9b:37:1c:ef:dc:01:d6:0c:ea:9f:0c:15:
                    ba:8c:40:b3:64:05:8a:c2:e3:07:15:f7:b1:50:dc:
                    09:76:bc:53:f1:15:42:d6:92:ab:de:8f:ef:4e:9b:
                    0b:ce:15:1d:e4:42:90:06:e3:69:63:2f:d4:59:8a:
                    a3:2d:15:8b:07:cf:a6:b9:97:86:e3:47:e6:c5:d7:
                    0d:5d:f2:27:5b:b8:1b:75:b4:a9:6b:75:e8:73:72:
                    3d:13:9f:94:61:d6:8f:a5:91:f5:39:cc:92:7f:0f:
                    1f:39:14:29:e2:e3:aa:4e:75:9c:59:37:77:7b:bb:
                    80:72:71:f1:d0:73:bf:f8:e4:86:9f:15:4c:23:6e:
                    ae:58:f3:a4:f9:0f:a1:f2:e2:75:1f:90:b8:12:e6:
                    77:c6:1a:71:68:e6:7b:83:cc:f1:6a:6e:ac:af:e6:
                    8c:fa:f3:35:83:0c:d3:46:f3:6d:56:a5:36:ce:a0:
                    c0:0d:1e:b6:2c:50:bf:e2:57:41:56:88:ee:8e:db:
                    d5:a9:f4:24:20:5e:72:be:c5:ac:97:38:a8:af:57:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:B1:14:D6:BC:51:20:81:60:96:04:69:36:CE:4D:F5:CA:FF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:50:f0:b3:9f:3f:30:94:06:cb:46:0a:42:02:94:f3:bb:d6:
         c1:34:37:2b:f7:1a:5f:03:ac:bf:78:f2:3e:6f:a1:2d:3f:07:
         e2:a8:3b:9f:5d:96:8e:9f:45:4a:01:49:cf:28:c8:4f:bb:dc:
         55:8b:95:54:49:a2:f6:6d:7b:18:f6:0a:68:31:72:27:d0:fa:
         0f:48:13:cd:1f:8f:65:81:15:38:6a:43:58:84:77:98:77:0d:
         16:90:85:ea:4c:fa:d5:b6:c8:47:57:2e:9f:72:3f:20:d0:1f:
         18:d2:f9:e2:f3:4d:ec:cb:ac:65:20:c7:c4:f0:90:4d:fa:aa:
         02:d8:c1:1b:23:12:b3:20:6f:dd:cc:9a:83:e6:e1:e1:20:c8:
         61:81:4f:a2:fc:e0:a2:22:aa:5a:f0:9f:56:bf:ba:49:7e:91:
         68:b8:2e:50:9c:ea:dd:fd:26:e3:f1:51:ca:c1:64:77:b4:69:
         c2:ac:77:04:f5:91:f3:23:74:c3:15:9a:47:c0:c5:06:19:38:
         10:a5:f0:12:22:ef:ed:30:7f:be:e9:33:21:5f:d8:e4:0d:3e:
         80:fc:36:55:4b:35:f5:f6:68:6e:cf:30:71:ab:20:83:a1:20:
         b8:f2:21:83:11:57:02:d4:92:69:15:9b:ad:40:89:af:30:77:
         fc:7e:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:37 2026 by rpki-client