Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa
File:                     6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa (raw, json)
Hash identifier:          Pz7/HMl7rE8gGdf3bC5iHPU1uaB5n12rbD8gWxT2EV4=
Subject key identifier:   65:EC:91:0F:BE:43:49:04:5C:08:1D:AA:6D:DA:8D:B5:4C:12:63:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644CA6A38D611B63B9E43A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     397201
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:ca:6a:38:d6:11:b6:3b:9e:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=35fd5eb7-9666-4bba-a76b-db6fe0fb5617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:df:6a:89:57:75:60:08:91:f6:06:23:10:
                    1c:bd:7f:79:c3:3c:38:04:a6:66:1c:de:4a:63:12:
                    c2:ce:0e:eb:80:97:0b:b9:71:78:c7:bf:6d:f2:d7:
                    60:e9:58:27:e3:a3:62:c4:56:3c:e1:f0:0b:58:5c:
                    0f:17:1e:e4:93:80:65:13:01:8a:fd:bf:c6:70:1e:
                    1d:32:2a:fd:05:32:b0:86:48:58:9c:d5:ac:0b:54:
                    fc:ac:1c:5e:09:a5:16:36:4b:ac:16:cf:d9:02:54:
                    82:3f:f3:7d:b8:d3:8c:7d:9e:9c:64:a1:32:5c:83:
                    82:35:30:43:9e:69:15:fe:a3:88:8d:c4:e5:a1:5a:
                    88:91:8e:54:99:6d:d4:2e:fd:d3:e4:b3:3f:75:a6:
                    89:f9:08:cf:43:89:01:b3:c8:74:5f:da:83:c0:17:
                    23:ad:17:08:6b:3d:d5:8e:f5:05:bc:77:20:08:7e:
                    15:79:7a:fc:44:f8:64:e3:28:e4:21:bc:3f:74:e5:
                    78:ed:40:f0:13:58:36:ec:0b:45:05:42:91:49:a5:
                    58:d8:7e:d7:12:1d:53:08:c7:de:e1:76:0d:47:61:
                    c2:ad:88:10:44:73:50:d5:35:84:2b:27:ab:42:47:
                    24:05:02:75:16:06:ae:22:7c:05:a2:6c:b2:2e:2f:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:91:0F:BE:43:49:04:5C:08:1D:AA:6D:DA:8D:B5:4C:12:63:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:22:e1:74:00:27:f8:4d:ab:a6:da:b6:d0:3e:1e:b8:ef:b4:
         5f:e4:70:36:ab:fc:65:7c:08:0e:87:b4:2c:c3:f2:2f:91:a3:
         82:72:f1:ee:cb:cf:dc:7e:c3:33:e8:63:44:f3:d3:67:e6:4b:
         9c:24:2a:6b:5f:72:10:24:cb:df:99:70:63:ce:d6:72:eb:93:
         1b:ca:ed:e1:98:10:4d:a7:9a:21:4c:2c:f8:71:26:a0:11:d6:
         7b:31:f2:76:77:59:c9:67:d2:22:8f:67:94:91:c7:83:6a:88:
         57:ea:cf:7d:8d:65:fe:19:09:f3:37:48:41:4a:0f:5d:da:aa:
         53:d6:ae:8a:c1:6e:64:39:c0:a5:ec:59:72:b4:da:e8:31:0f:
         fc:8a:51:4b:bd:48:37:9e:b8:2e:70:a5:e3:10:c5:95:c3:6a:
         49:14:14:02:72:e0:9e:f2:76:ab:3b:7c:ec:40:28:1d:f4:19:
         ff:f0:fb:53:f3:94:0a:54:ec:ec:b8:2f:66:1b:3e:f2:52:5c:
         5e:94:b5:fe:a1:5f:a9:d5:91:ed:ca:77:43:f3:aa:18:1c:5c:
         ce:33:29:68:62:63:4f:c9:35:33:5c:b0:70:77:28:85:37:68:
         6e:2b:fa:53:a9:ef:75:af:b0:9a:d1:cb:ef:28:15:34:95:85:
         ab:c4:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:19 2026 by rpki-client