Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa
File:                     0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa (raw, json)
Hash identifier:          OXwgFVn9A8DSYMwRktkGpoa8kYge+TV9Dlixa6r56sU=
Subject key identifier:   F9:58:CB:F3:7C:68:A7:15:76:AB:87:D6:4B:B1:92:A1:1F:BF:F3:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198ACB7E52CF18B692F400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     36628
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8a:cb:7e:52:cf:18:b6:92:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=1204610f-7ed1-4819-a8c3-36e319400e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:1c:39:79:f0:eb:ee:3f:a1:eb:9f:43:2c:
                    bb:f4:ca:6c:81:97:2c:e7:e2:ed:21:fc:f3:54:0c:
                    9f:a9:08:90:a0:36:68:ad:96:78:b9:0a:14:13:e8:
                    05:5a:fd:74:ca:bc:ef:37:2b:a3:c8:33:06:55:37:
                    d2:72:c2:b8:75:8f:62:35:d5:26:f8:a0:65:fa:bb:
                    6c:fe:fa:7f:12:07:13:71:85:fb:df:fd:85:09:b5:
                    79:15:47:64:ce:dd:97:c9:d7:17:61:3d:4b:e5:a1:
                    04:ca:1a:04:5e:40:ba:8d:f9:5c:0e:7f:34:01:b0:
                    57:c6:2d:64:29:d5:4b:35:b3:84:b0:47:18:b1:f7:
                    8c:25:b1:bf:de:c9:00:20:16:17:0b:f6:ff:36:c3:
                    a2:74:23:8b:b3:0a:8f:76:c0:d2:1b:c7:d0:71:a3:
                    75:4e:6a:6a:a6:50:21:18:d3:e2:19:53:13:b3:28:
                    5b:ac:f9:53:82:8c:f1:bc:78:ba:d4:4c:03:0d:87:
                    3a:33:ce:37:ad:a0:ed:04:5a:af:03:a3:6c:01:bf:
                    1e:28:78:de:85:92:91:59:8f:49:9b:2a:84:d7:0a:
                    ff:f3:44:a5:78:15:bc:d5:dd:34:e5:7c:94:7b:68:
                    d3:98:e2:d4:e7:41:21:a9:0b:7f:e0:ce:bd:e5:d0:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:CB:F3:7C:68:A7:15:76:AB:87:D6:4B:B1:92:A1:1F:BF:F3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:01:11:db:1c:10:ac:b0:7f:c7:fc:4c:e8:1a:c5:a6:40:
         98:00:e2:c2:1e:e8:80:ff:a6:5f:ea:63:73:e6:d4:76:21:5e:
         5f:4c:7f:01:a9:20:f1:15:bb:42:46:8b:ac:a4:c9:9d:11:d5:
         d4:ec:bb:68:7a:86:1e:e2:5c:0b:10:bb:2f:0e:30:89:82:d8:
         ca:be:80:35:2e:4b:3c:b3:0e:68:d4:71:a1:e6:8f:23:ef:ac:
         71:a7:d5:61:a0:3d:4d:df:ac:9a:7d:a8:2e:5b:86:77:7d:16:
         a7:2f:ae:b4:d9:70:3d:54:14:45:f7:35:db:f3:e5:32:a8:9d:
         6c:50:28:47:5b:c8:e8:8a:9e:4c:10:b0:3b:14:f3:b4:d5:9e:
         8d:55:41:c0:43:d9:0c:15:e2:84:24:b3:5c:a3:82:65:aa:c0:
         ba:b2:84:2a:e0:df:34:46:de:04:0b:88:74:80:f1:6c:91:56:
         70:8c:99:95:13:d9:b9:5d:39:46:f2:ef:ee:e9:5b:b1:f6:6b:
         8d:9f:0a:84:9e:bf:4f:f0:9b:d5:8e:a0:cc:7b:20:0f:a3:ed:
         ee:97:07:ba:47:a5:2f:94:fc:7c:54:b2:cb:1a:c4:78:71:b3:
         5c:4c:1c:2b:88:3c:64:0d:48:78:b5:3f:66:78:c0:b9:7e:5b:
         90:d6:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:00 2026 by rpki-client