Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa
File:                     6c2f64b9-4b38-39d5-861c-02354a011eed.roa (raw, json)
Hash identifier:          pYnumCs3lxtWFKg7md8TLzHLwEmfOD8/H+uOgbu6cyQ=
Subject key identifier:   77:E3:25:AC:FF:07:B8:9C:1B:C2:D2:BE:22:4C:D0:61:C6:52:36:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E0010BB92D70FB5EB0CC680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396541
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:10:bb:92:d7:0f:b5:eb:0c:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=382b550a-8a44-444a-ba45-0fd71280fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:a3:0e:8d:4e:e3:85:ec:3b:aa:04:31:cc:
                    31:7c:08:25:61:bf:0e:ce:9c:c7:80:6d:bd:75:57:
                    d9:71:30:a6:7f:1e:cb:63:dc:1b:2b:e1:5a:4f:cc:
                    73:dd:36:a2:23:bb:55:57:46:d7:9e:af:14:77:5d:
                    78:6d:a1:80:42:80:88:c0:10:22:60:97:fa:d1:59:
                    98:1d:b7:c7:32:1d:51:f4:05:29:a2:1d:02:ce:f6:
                    0b:29:ae:12:2a:25:71:80:79:5d:9d:79:89:9a:ab:
                    80:c0:f3:b0:a7:90:91:1d:c7:e8:d8:f6:46:57:48:
                    86:50:b9:e6:69:26:33:ad:30:9a:b8:f4:f9:e2:b1:
                    93:9c:9a:8e:73:01:cc:ec:ef:50:fc:c4:b1:8f:ec:
                    70:bd:4c:e0:7d:15:66:18:88:76:84:22:4d:06:cc:
                    63:f6:df:e9:bd:9e:5e:58:5c:b2:84:99:87:af:3e:
                    65:0c:dd:37:6f:38:fa:f7:6f:26:ce:d0:bb:df:eb:
                    58:b3:21:59:e3:a2:a7:28:0c:ed:46:9f:cb:c9:70:
                    f0:9e:c5:02:a6:bc:92:b0:b6:34:f2:60:18:e8:ca:
                    da:2d:fd:f7:d4:2e:42:20:61:98:60:9e:68:91:80:
                    80:dd:bd:67:d8:90:c5:e5:07:6b:eb:de:4c:94:82:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E3:25:AC:FF:07:B8:9C:1B:C2:D2:BE:22:4C:D0:61:C6:52:36:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:95:ab:82:bd:ef:1a:10:92:20:bc:58:9b:91:e5:78:38:8c:
         c2:8f:6b:70:82:8a:92:9f:55:74:4d:3f:52:ea:30:87:a8:45:
         85:0f:ff:4f:17:f3:d1:f2:0a:58:e9:e0:72:ea:1e:09:42:a6:
         b9:d3:63:2d:c1:cd:8c:ed:03:90:70:ce:6a:17:1c:3b:62:83:
         b3:06:28:96:f3:a5:39:b6:aa:95:bd:8a:7d:90:40:44:c9:cb:
         35:80:31:09:6d:4d:56:d8:d9:e2:30:19:e4:48:71:3a:43:e1:
         f4:3c:08:ec:27:e1:78:89:a3:a2:13:0e:a5:15:47:93:b0:08:
         01:54:df:44:ae:9d:4a:7b:9e:24:1a:73:57:2a:5f:21:6c:0f:
         d3:44:ec:58:31:e1:22:22:32:ec:5b:1f:b4:e2:2a:b1:38:f7:
         e5:71:b3:ca:9c:a8:63:07:9d:1a:95:80:f4:32:87:56:c2:c2:
         87:30:1b:e0:2f:6b:10:f8:6b:ec:20:08:2f:e2:6a:48:91:9a:
         30:2f:1a:28:d4:0c:af:c1:bd:3d:da:62:9a:7d:aa:2c:7d:59:
         c7:72:d1:13:62:bf:86:f7:ad:5e:81:27:89:74:ec:45:ff:ea:
         8e:aa:e8:ff:4f:9f:97:f2:03:46:d1:18:7e:8d:b5:c8:17:24:
         25:bb:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:42 2026 by rpki-client