Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/162741f3-72b5-3a6c-bd4b-e473cfcd7e4b.roa
File:                     162741f3-72b5-3a6c-bd4b-e473cfcd7e4b.roa (raw, json)
Hash identifier:          1P0DRdjpgzPdNuNOAzCiIjH59COqk1JGkMOcx/XxgR0=
Subject key identifier:   51:B1:94:C5:70:40:9B:4D:0E:A1:D5:03:F9:28:EC:AB:74:6A:B1:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB3C6C10CCDD6F807F2780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/162741f3-72b5-3a6c-bd4b-e473cfcd7e4b.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     21313
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:3c:6c:10:cc:dd:6f:80:7f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=de253b7e-29a7-48b4-ae4b-905d82ec7a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:0b:ae:a0:90:65:e6:b4:9b:fa:7f:52:88:
                    f2:fb:1d:94:65:15:c2:09:96:6d:a3:3c:d4:24:aa:
                    b1:31:82:53:c2:b7:d7:dc:66:a8:65:c6:95:de:9b:
                    ab:b5:1f:de:f0:e7:27:aa:cb:d9:d5:33:c8:ec:b4:
                    b9:37:d3:8e:43:55:91:b8:c9:32:72:e2:6c:d0:bf:
                    ec:82:0f:74:b7:d2:11:bb:6f:52:b7:2d:41:50:37:
                    78:9a:1c:08:4d:5a:5d:70:21:e7:b3:20:e3:97:18:
                    6f:6b:31:cc:1f:35:45:90:5a:f9:96:58:c3:45:c4:
                    a8:93:bd:ae:cc:a3:7a:35:bd:27:2f:d5:cc:50:85:
                    95:fd:5c:90:8b:33:cb:a4:17:a6:9c:75:ff:33:b5:
                    5a:24:e1:60:5b:70:89:64:e2:a6:27:09:8b:6a:ba:
                    e1:84:bf:94:0d:25:7f:76:37:ef:82:40:a7:db:97:
                    a7:68:3d:8d:e1:20:22:8a:8f:e5:1c:10:1b:3e:e7:
                    e9:56:59:e9:dd:de:9f:c9:81:81:67:ca:d0:65:44:
                    fc:63:6c:81:b7:f5:b7:19:ad:d2:cf:2b:88:44:51:
                    86:5b:f3:21:8b:5e:0c:2b:97:4d:88:aa:3a:be:51:
                    20:7d:3b:17:83:8e:85:f5:3f:7a:70:91:2d:a7:04:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:94:C5:70:40:9B:4D:0E:A1:D5:03:F9:28:EC:AB:74:6A:B1:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/162741f3-72b5-3a6c-bd4b-e473cfcd7e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:48:60:3b:36:b8:46:8c:89:10:bc:99:5c:71:38:9c:39:ac:
         e4:3a:c8:9e:0a:36:03:1e:06:27:fc:ff:d3:77:ca:e5:ed:42:
         40:6b:3d:66:54:24:4a:24:04:d6:76:92:de:61:da:cb:3f:b2:
         5d:21:b5:e7:49:2d:46:93:51:fb:cf:56:ee:5c:ad:12:63:be:
         2c:f5:60:57:d1:db:6f:aa:90:c2:ff:1d:4d:24:7c:85:2b:8c:
         c2:0e:47:69:0f:12:4b:2c:82:e7:a2:30:2d:a3:67:1f:d9:42:
         85:a1:84:57:ab:8b:53:86:5c:b2:85:ef:61:32:3a:72:a2:2b:
         76:46:f1:2d:15:31:c8:d5:f0:82:e5:b0:f3:4a:db:3f:e2:13:
         01:f9:cd:ad:de:2f:18:c2:4f:ce:f6:61:fe:4f:19:75:ce:7f:
         ec:73:0b:75:87:d7:33:10:ad:67:62:f8:c5:d6:fe:51:e5:76:
         01:58:61:c0:a2:b3:e1:eb:b2:fc:10:f6:ac:17:ec:39:d1:11:
         4f:26:4a:de:d1:63:23:5f:f7:c3:30:7d:bb:48:44:72:e2:3e:
         22:6c:6a:a1:67:34:86:6c:36:8b:d3:6d:ba:89:28:d5:25:3f:
         fc:34:9d:01:ed:88:3b:83:e4:4d:c7:9d:30:99:c0:2b:67:d4:
         48:de:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:34 2026 by rpki-client