Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c3235f1-7592-3ae4-b283-c0699e9999e6.roa
File:                     6c3235f1-7592-3ae4-b283-c0699e9999e6.roa (raw, json)
Hash identifier:          8uZs9+DaF6z+/eup2v9DrQ7WHkmytun4AYURouGd47A=
Subject key identifier:   05:68:6D:82:D6:B8:CF:64:4A:73:16:56:DD:D6:C5:97:09:80:4C:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C36B89EC67FB9763198C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c3235f1-7592-3ae4-b283-c0699e9999e6.roa
Signing time:             Thu 12 Mar 2026 14:31:06 +0000
ROA not before:           Thu 12 Mar 2026 14:31:06 +0000
ROA not after:            Wed 10 Jun 2026 14:31:06 +0000
asID:                     211369
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:36:b8:9e:c6:7f:b9:76:31:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:06 2026 GMT
            Not After : Jun 10 14:31:06 2026 GMT
        Subject: CN=1ea1267a-fa01-424a-957e-5a4ac83c71fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:71:62:1b:53:ff:fa:37:1c:02:b3:f1:38:
                    ee:36:d2:c1:6f:33:77:72:ab:c0:5c:af:78:47:7c:
                    62:6f:bf:e0:48:8f:f0:96:73:95:40:49:6b:99:0f:
                    af:aa:47:36:e4:a9:67:8c:40:e8:e1:40:72:fd:a8:
                    64:30:10:bd:e5:c2:2f:43:b9:74:c1:d6:23:a0:f3:
                    37:60:e2:bd:60:15:d9:2c:73:f8:3c:f6:c0:12:40:
                    4f:74:5b:db:b7:49:6b:af:28:bc:c1:6c:52:d7:e1:
                    ba:ac:40:9f:a7:3c:2c:d1:0f:74:fe:98:38:7d:d4:
                    ad:fe:58:24:1f:55:39:c8:26:9e:7c:fa:b9:c7:fe:
                    22:00:24:64:5d:14:b5:79:b6:14:d1:d4:c3:a3:75:
                    a4:29:db:f7:15:4e:ee:dd:26:e4:01:5e:11:06:c4:
                    c5:38:f5:7e:2a:3b:f2:eb:32:ae:4b:23:e5:00:52:
                    87:7a:15:c1:8f:03:75:ce:34:f6:f8:6d:6d:b6:1a:
                    cd:5e:df:f2:56:61:53:1c:bf:12:56:f8:76:bb:31:
                    72:b0:82:79:cd:a6:a3:1e:b8:17:10:3d:25:da:39:
                    4b:9a:a2:d1:e0:0c:ec:ae:25:89:e4:bc:56:9c:0f:
                    94:0d:c5:8e:e2:f9:98:c8:4c:45:03:83:e1:a2:24:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:6D:82:D6:B8:CF:64:4A:73:16:56:DD:D6:C5:97:09:80:4C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c3235f1-7592-3ae4-b283-c0699e9999e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:16:c6:81:45:67:e6:8f:9a:09:74:f8:79:ff:ca:fe:25:
         cd:99:64:f2:87:f2:93:03:8e:6a:46:3d:f6:67:42:39:d6:0e:
         7d:ac:15:05:77:a0:16:e7:07:4d:94:bb:ee:97:19:0a:b3:25:
         8f:e7:3e:59:3d:d7:0c:47:a8:88:de:6d:ef:cf:b9:bb:aa:3c:
         e7:f0:f7:09:da:27:b1:15:d2:8f:dd:2f:9f:dd:e7:61:f3:6c:
         b2:9f:f1:ef:99:0f:a0:17:1c:08:ad:45:95:74:5f:75:d2:f9:
         d2:a6:b1:b3:1d:0d:00:7c:4e:5a:5d:04:9f:e5:82:a5:cc:bf:
         66:08:67:05:5b:0f:cf:8d:b1:82:bd:25:de:3b:e1:8c:af:34:
         c9:56:3d:32:56:e0:01:f7:b2:84:ba:5f:78:b2:49:66:9f:55:
         11:5d:e5:78:08:f0:cb:fb:7e:bd:ae:03:e1:35:dc:e9:9a:58:
         d3:18:de:b5:64:59:00:6b:b6:9b:b4:12:05:12:3d:2a:e7:63:
         70:f5:9d:93:51:3f:13:52:6c:1e:a0:fb:d4:ea:a9:58:79:60:
         1b:4a:04:b4:e8:d7:a6:cb:7e:93:89:ef:f0:5a:ff:55:e9:35:
         02:e8:87:d3:90:fe:69:53:49:64:07:fe:27:78:70:42:17:c1:
         01:74:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:11 2026 by rpki-client