Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa
File:                     02ed6247-086b-3dbf-9146-f800d023870f.roa (raw, json)
Hash identifier:          s3BExRUEDAeEPZss8dGsgKRr26c0ctOP2bKh9v6HYNk=
Subject key identifier:   D4:F0:FE:82:A4:06:02:E4:13:9E:70:1F:4F:35:EF:BD:FC:4C:73:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B19234C44FA165B3838C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396553
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:19:23:4c:44:fa:16:5b:38:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8256b936-d9c9-45ce-b4b7-fcd43e538be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:3e:12:42:f5:27:55:bd:05:bf:2b:a0:1d:
                    32:63:f5:1c:95:db:a9:55:4a:1c:b8:cb:62:a3:88:
                    33:32:50:b8:b4:9f:24:1e:ec:4d:0e:af:de:19:c4:
                    a4:28:a0:ff:15:c4:68:33:12:e3:9f:57:d0:c8:70:
                    7a:08:29:56:49:b3:be:4c:d8:6b:f5:3d:36:a9:db:
                    fc:1f:8c:28:fb:21:4b:67:4b:63:91:b1:32:62:7b:
                    83:a5:bf:a2:24:13:6c:f9:76:17:7c:f9:e5:7a:a8:
                    e8:44:45:cb:c0:e4:1a:6a:62:ab:6a:e0:1b:20:61:
                    a4:61:c3:26:8e:b9:9c:6b:6a:1b:8b:f0:de:02:70:
                    20:59:bc:81:51:f9:3b:2d:64:a8:2b:86:db:c2:2f:
                    3d:71:80:d5:e1:35:32:5b:2d:3b:70:f9:e3:a0:ac:
                    7f:5f:91:46:c4:f9:b0:65:44:e6:95:9d:33:8f:00:
                    df:3f:3d:1a:53:73:4d:a8:08:83:33:2d:ed:25:fb:
                    b7:5d:86:9e:14:55:ae:76:fa:48:6c:cf:1c:01:bf:
                    91:20:da:ec:ea:0a:df:bf:19:ba:27:f2:e6:0e:fc:
                    c7:f6:38:96:44:ca:52:a5:ac:2e:79:4d:f7:3c:ba:
                    06:d6:d3:15:f6:69:a4:ef:7c:ea:91:a5:87:6e:c5:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:FE:82:A4:06:02:E4:13:9E:70:1F:4F:35:EF:BD:FC:4C:73:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:5e:c0:82:95:41:3f:00:e4:78:df:0c:d5:06:9e:8a:e4:
         9d:01:e1:a5:09:fd:43:8d:47:d9:8e:a7:35:f1:fe:0b:61:69:
         53:1b:15:b7:05:fe:8f:ec:62:50:2d:b2:13:d3:44:5e:2a:d0:
         fb:86:5c:4b:6c:7a:ad:b7:3d:d2:cb:f1:06:95:64:f3:02:47:
         d7:8b:9b:8f:1f:af:70:12:9b:09:de:0e:17:f0:67:6d:7e:25:
         58:7d:94:fb:2e:5e:d7:0e:5f:b2:10:c3:a4:d7:93:f3:57:ab:
         f0:52:af:38:40:3a:54:ea:9b:ce:7d:27:e6:d0:d1:4d:03:36:
         ae:bc:ab:8a:55:a6:a3:f2:9d:48:bd:01:3a:cb:ee:88:87:c3:
         a6:1d:27:55:05:c6:5f:5b:a1:48:a7:d0:d1:bd:69:5e:60:3c:
         33:f0:53:af:30:96:03:24:2c:3d:61:74:06:b0:e1:90:64:af:
         96:3d:b7:09:2a:aa:78:7e:2d:3c:35:a3:72:99:6b:47:0d:42:
         77:fc:cd:b5:07:72:8d:d3:cb:68:7d:c1:8d:d4:87:e4:da:1c:
         63:74:16:75:7d:dd:0b:e9:ea:09:32:08:51:af:8a:aa:4a:9d:
         90:9d:92:ca:f5:16:4e:30:a2:0f:14:fd:d1:f7:0f:67:c6:b6:
         17:34:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:27 2026 by rpki-client