Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6d1e85-6d90-3b4d-a2b8-50bc5969d771.roa
File:                     6f6d1e85-6d90-3b4d-a2b8-50bc5969d771.roa (raw, json)
Hash identifier:          FSxb8ZGddiIPqWf0516q27AISDkQ/N6vq2rUx6OKgn0=
Subject key identifier:   69:18:85:CC:C8:F0:C7:9B:11:FF:76:D4:27:38:ED:BB:FA:5C:0B:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F2C73A4E84579941F7280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6d1e85-6d90-3b4d-a2b8-50bc5969d771.roa
Signing time:             Tue 28 Apr 2026 14:56:54 +0000
ROA not before:           Tue 28 Apr 2026 14:56:54 +0000
ROA not after:            Mon 27 Jul 2026 14:56:54 +0000
asID:                     396586
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:2c:73:a4:e8:45:79:94:1f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:56:54 2026 GMT
            Not After : Jul 27 14:56:54 2026 GMT
        Subject: CN=cbdef474-396f-4cce-bfe6-9918d4f214c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:c9:5c:d3:e7:3d:22:3e:3c:f0:cf:f6:68:
                    56:8e:ef:6c:a6:c6:e8:4c:8e:36:0b:15:d5:a7:b9:
                    ef:b8:2d:49:d6:c1:f1:21:7e:a3:cb:76:f9:10:5c:
                    7f:50:8a:e6:8d:5e:c3:ad:df:83:d7:38:2d:2e:c3:
                    af:7d:3e:71:38:14:00:59:98:f6:70:86:6f:bd:70:
                    e8:5a:c9:37:13:90:24:d0:8d:70:e7:de:fc:2b:f6:
                    37:97:8e:35:bb:aa:65:14:89:4b:d7:5f:d3:e7:fc:
                    e2:32:44:f7:92:45:23:50:90:ec:75:f7:02:1b:13:
                    cf:bc:3a:1d:d6:da:b7:98:0d:59:07:0c:67:11:e5:
                    c1:2a:73:37:97:11:2d:65:20:90:95:ba:22:80:21:
                    c7:ba:fc:0a:9b:7e:0a:dc:ef:6b:54:02:12:ed:51:
                    3c:26:87:14:23:84:70:60:f8:80:7f:c9:1f:e6:b2:
                    27:8e:8b:1a:23:3a:38:79:56:7b:db:a0:82:6d:8c:
                    59:98:0f:4d:10:60:1f:2b:30:c4:df:4b:38:20:0e:
                    69:cc:dd:11:9f:1f:e8:25:ed:a8:0e:46:bb:32:15:
                    d3:97:e1:3f:3c:4f:c8:e9:5d:77:c6:74:b0:23:05:
                    49:67:81:e4:2f:15:fc:f7:6a:29:98:3b:df:5e:88:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:85:CC:C8:F0:C7:9B:11:FF:76:D4:27:38:ED:BB:FA:5C:0B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6d1e85-6d90-3b4d-a2b8-50bc5969d771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:2d:a2:f6:f5:2d:0b:49:cb:a2:de:4b:ed:18:34:cb:54:
         df:4c:33:02:31:6a:36:f7:32:44:1c:ee:e0:0a:63:e2:c4:11:
         2e:65:63:a6:fc:fe:6d:df:92:8a:c1:3f:51:d8:9c:8e:e4:c9:
         c6:2e:bc:53:d3:65:42:31:26:7d:26:f2:8c:30:29:17:f5:5d:
         da:53:03:90:be:1e:b9:47:93:7f:36:09:cf:bb:93:51:c4:e6:
         ba:4b:76:c4:97:cf:2c:70:f5:16:9c:5a:09:b8:86:6b:19:e6:
         91:07:c9:de:8b:d2:ee:a3:e5:24:00:b0:18:c7:91:48:06:d6:
         32:bb:1e:96:4a:38:fa:d2:f1:b5:c2:b3:e7:8f:d8:dc:92:35:
         86:22:35:95:7d:7e:4d:1a:62:d9:1f:26:f1:ad:7e:36:9d:56:
         01:e6:c4:5f:93:e7:59:fa:a9:1d:9c:23:a7:72:3a:6f:af:89:
         3d:fb:49:23:68:b0:00:09:6c:d3:ee:9d:82:03:b8:77:fe:c7:
         0b:8d:0d:35:86:1c:41:0c:c0:cf:46:b4:3b:50:ed:f4:e4:4d:
         fb:e9:d7:87:e2:3f:46:a5:e3:f0:ae:59:ec:e7:02:72:9b:d7:
         2f:88:bc:3c:a9:93:18:55:bd:39:85:55:06:f0:61:0e:3b:82:
         9a:4d:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:26 2026 by rpki-client