Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa
File:                     6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa (raw, json)
Hash identifier:          OcXntf+oXe1qgbXchYi6DdBhgvvwqxq8AotSVvpfV4w=
Subject key identifier:   76:EB:3F:13:80:EA:11:57:CE:FD:6A:D8:67:5B:FB:A6:71:66:E0:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644D69BA3EECA93AD7AD880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396606
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d6:9b:a3:ee:ca:93:ad:7a:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=47cbff00-d1a0-4942-ae71-76d222472156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:0f:69:73:e6:93:b1:a8:c3:28:c0:ff:45:
                    ab:ba:8d:2b:c3:2d:12:3f:e3:08:98:7c:49:68:e2:
                    19:6c:fd:99:1b:d3:c5:62:c8:ad:8c:e3:ae:62:27:
                    c2:86:f2:b2:06:7d:37:1d:d8:9a:c1:9d:f1:67:b1:
                    d6:f9:71:b0:58:97:d4:08:69:99:93:db:e2:54:1c:
                    f8:f6:29:0e:32:ef:8d:cb:cc:41:99:27:d4:09:58:
                    a9:81:6a:64:d6:91:06:43:1b:c4:f4:5d:ac:00:90:
                    5f:f3:79:42:65:d5:1c:6a:17:f6:ec:63:29:d3:68:
                    9c:8f:40:6c:d2:a2:80:99:95:94:20:b0:b8:4a:f4:
                    26:29:ef:c1:fa:85:c9:d8:a7:3b:9f:bd:59:51:c6:
                    1f:3a:55:b7:36:de:42:71:12:11:8a:df:5d:ff:50:
                    f7:01:7b:29:30:fe:aa:b0:f9:de:7d:ab:0c:18:2c:
                    ec:2a:53:31:0b:98:83:db:31:06:f7:c4:c5:4f:20:
                    13:3f:16:fa:50:65:2a:b2:d9:b9:83:9c:c8:53:3a:
                    44:b1:e0:4e:32:d7:69:34:4d:64:2c:17:7b:f0:3b:
                    81:77:79:4e:5b:f5:c7:08:97:ed:58:76:3a:7f:13:
                    7d:5b:69:23:d4:ad:d3:e4:23:a9:74:72:a0:0c:d4:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EB:3F:13:80:EA:11:57:CE:FD:6A:D8:67:5B:FB:A6:71:66:E0:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da1ccac-fd7a-34b2-85c5-0765c2ca9c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:86:e3:25:f5:f1:9b:f2:51:36:a1:fe:61:91:81:fd:b6:aa:
         70:04:e4:3d:0f:93:cc:6b:94:7b:3d:26:a8:fc:89:22:2e:9e:
         b8:f6:0d:35:9f:36:d9:67:f9:7c:27:9c:ce:c4:f9:01:af:e8:
         e1:6e:00:3c:7e:c3:a0:59:34:bf:81:30:4c:34:b1:54:27:b1:
         ee:43:c4:94:e1:cd:9e:f1:ff:e3:6b:a6:4e:84:08:44:22:09:
         0d:95:ca:1b:28:94:d3:c1:61:94:3b:d4:df:c3:04:63:ea:5f:
         28:73:7f:16:7c:81:65:3c:5e:02:1d:6a:6e:47:8b:84:53:f2:
         e9:e5:9f:fc:bd:b4:f9:7a:ed:c9:15:69:04:a9:43:94:c5:64:
         83:8c:2b:eb:e5:ed:5d:2d:b0:fa:d1:40:ae:19:b1:57:61:77:
         7d:9d:cf:72:4e:16:62:99:e6:32:91:a2:ae:47:9b:b1:91:09:
         e9:5b:4f:bc:71:56:f3:f2:a4:c9:b3:82:2f:a8:9d:5e:0a:81:
         8c:5d:8f:28:48:8a:d0:79:fa:5e:59:cd:a4:e9:ce:48:49:d3:
         08:11:53:4b:06:74:0a:56:d2:94:07:a9:66:26:52:50:01:9d:
         59:6c:30:4b:12:3f:05:a0:00:cb:5a:24:54:51:f2:ad:5c:24:
         86:ec:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:50 2026 by rpki-client