Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1934d1bd-3fcd-33d9-bf1d-f6ce7ddbe49a.roa
File:                     1934d1bd-3fcd-33d9-bf1d-f6ce7ddbe49a.roa (raw, json)
Hash identifier:          Ut/Y/YKikpaBQh6E23w0WJ+A68+eLuqUfuzh0gO+YWE=
Subject key identifier:   CF:99:68:F1:80:EE:CB:17:3F:65:58:DD:6C:3D:58:98:57:3A:06:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B843D7117012115CF05B4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1934d1bd-3fcd-33d9-bf1d-f6ce7ddbe49a.roa
Signing time:             Thu 04 Jun 2026 14:26:45 +0000
ROA not before:           Thu 04 Jun 2026 14:26:45 +0000
ROA not after:            Wed 02 Sep 2026 14:26:45 +0000
asID:                     36631
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:84:3d:71:17:01:21:15:cf:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:45 2026 GMT
            Not After : Sep  2 14:26:45 2026 GMT
        Subject: CN=ef77755f-71e0-45c5-9bdd-ba206e50658b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:e3:99:6a:f7:ad:4d:38:45:d7:29:62:f3:
                    a1:83:1c:24:1c:9e:77:61:20:68:35:7d:49:ae:9e:
                    c8:38:02:24:00:27:51:83:99:7b:0b:b7:bc:61:2e:
                    21:f5:50:af:18:a4:14:68:eb:2c:25:90:48:f0:30:
                    df:c0:c0:b6:49:99:93:f6:24:0b:36:31:5e:10:55:
                    45:50:32:39:63:10:6f:d8:0e:de:5a:77:33:12:6a:
                    27:b0:76:60:90:c9:fd:95:f9:f2:63:a4:f0:1b:b0:
                    e4:1c:3d:1c:ca:21:0d:ad:f2:70:7d:5f:34:25:a3:
                    53:b7:e4:03:e0:8f:a1:d3:55:e7:f1:c2:5f:76:36:
                    f1:73:e2:b9:95:36:93:17:c4:5f:82:41:bf:23:ec:
                    f2:f7:e1:44:9a:33:af:5e:c7:9b:c7:2c:ba:41:e3:
                    5f:cc:28:eb:45:89:e1:fd:84:c3:fe:0d:53:f0:41:
                    84:37:c3:2a:65:b8:ab:f0:61:94:17:89:21:a1:41:
                    60:52:09:c0:87:ef:63:89:6c:5e:a0:9d:eb:d9:47:
                    41:cb:4a:90:b0:cc:9b:f6:4c:47:ae:cd:2b:ae:08:
                    ee:c3:55:77:14:89:06:a1:06:82:e8:a9:b9:b2:c2:
                    13:de:f7:ea:e3:87:bb:0e:1c:e6:02:67:e8:00:91:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:99:68:F1:80:EE:CB:17:3F:65:58:DD:6C:3D:58:98:57:3A:06:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1934d1bd-3fcd-33d9-bf1d-f6ce7ddbe49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:2a:0d:f3:c3:cf:80:6e:1e:1b:ec:70:25:92:05:23:75:
         08:af:64:5f:63:b5:03:b1:38:79:f1:9f:ba:b6:15:3a:18:42:
         2c:de:6e:17:eb:dc:d1:67:d2:75:10:22:e1:96:9b:20:c6:d9:
         ae:cd:e9:2f:f0:4b:16:d1:ec:68:22:39:44:ce:9f:a6:40:c4:
         78:1e:99:49:a9:ef:1d:00:1b:61:a0:f8:bc:59:f3:9e:c9:44:
         50:8c:40:46:11:41:c3:a8:9e:93:fa:06:49:0b:e4:a3:d8:9a:
         72:d2:cb:8c:9a:7b:c3:6b:d3:31:d0:40:d2:32:52:93:3a:2f:
         27:14:b6:e1:2c:5d:4b:10:80:a4:c3:e8:d7:9c:f1:82:76:dd:
         97:53:ef:79:e7:35:58:46:15:8c:9a:7d:1f:05:2f:cd:62:13:
         8e:b7:e9:97:46:76:9c:42:b1:2e:1c:ae:39:31:5d:5a:45:c2:
         4f:99:9c:02:62:d8:76:43:43:da:55:e0:57:af:3d:30:23:16:
         94:aa:22:8a:53:94:7b:bc:99:3b:4c:ed:6c:6e:f5:29:a6:f9:
         e1:ad:f5:36:f1:88:f9:ac:d6:00:27:ce:16:33:dd:04:f4:8f:
         f8:0a:53:97:a2:14:54:09:b1:e4:02:f2:55:40:5c:07:29:9f:
         44:88:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:16:39 2026 by rpki-client