Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a6a112b-bb8f-3e6b-a1e6-31c478aa7829.roa
File:                     1a6a112b-bb8f-3e6b-a1e6-31c478aa7829.roa (raw, json)
Hash identifier:          NIieK2JUKIZCNhsqTaLBf86aecOVA40ck5sUzPoke6E=
Subject key identifier:   4A:99:C9:D8:79:7B:A6:D9:AD:92:02:E3:62:3D:22:93:48:A0:49:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD8F08120AFE0003EF9FC01A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a6a112b-bb8f-3e6b-a1e6-31c478aa7829.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     397207
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:81:20:af:e0:00:3e:f9:fc:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=898f9e38-966c-41bc-b908-78956c366341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:24:d1:c0:69:82:93:47:7d:1e:0a:75:33:
                    57:33:79:f2:4c:e8:fc:b9:a6:3e:8c:36:3f:5c:f0:
                    72:a1:bc:e0:f5:61:b8:33:40:ca:c2:3c:f3:3f:f6:
                    74:c9:0e:9d:07:22:ee:ae:30:ec:70:00:e4:52:f6:
                    26:d9:5b:69:2c:38:62:62:be:91:0c:de:36:84:97:
                    98:76:aa:e9:31:7a:bf:d2:0e:40:77:10:9a:6c:ed:
                    6b:35:f7:a5:af:d5:53:9f:3c:94:20:72:8c:00:3e:
                    30:e4:8b:d0:63:65:84:a0:6c:e3:15:32:d2:34:d5:
                    18:59:d6:97:97:2c:78:af:f8:cc:91:bd:8e:49:c2:
                    67:4b:40:3f:50:3f:6d:b3:c5:a7:54:48:f5:5f:6c:
                    0e:b6:ef:bf:ec:c3:05:47:ac:92:d8:e1:24:f6:83:
                    fa:2f:7d:c8:8f:93:df:f7:ca:cf:ac:c4:c7:b5:70:
                    1d:08:09:f9:10:52:01:18:5c:75:3b:47:74:2c:bb:
                    eb:c2:54:d2:63:a3:e4:d3:bd:0e:15:e7:56:2e:c1:
                    2f:2f:bd:51:68:96:70:62:2d:6a:54:22:d3:38:a6:
                    93:8d:d2:a4:f0:f1:b0:69:d5:9e:c3:52:21:65:f4:
                    34:64:f0:7b:4b:3d:95:64:5b:97:36:66:49:de:8b:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:C9:D8:79:7B:A6:D9:AD:92:02:E3:62:3D:22:93:48:A0:49:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a6a112b-bb8f-3e6b-a1e6-31c478aa7829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:86:b0:11:21:f1:3b:19:7f:c7:ab:79:3a:6d:86:8f:06:58:
         e5:22:8b:34:15:3c:17:a6:7a:ab:16:ca:2a:11:12:f5:cc:44:
         65:b6:3b:c3:65:7b:a8:61:64:2d:fb:02:88:03:bd:83:4d:89:
         da:ea:a5:ce:a2:93:fc:47:d9:e7:e5:26:0b:69:16:a0:2b:cc:
         f0:7a:d0:f8:94:09:6a:60:0c:75:f5:4c:f7:83:56:69:2f:3c:
         9b:c9:f6:fa:75:a6:cf:69:71:38:3f:7a:fc:aa:3c:26:69:9c:
         91:3a:c8:93:f5:51:e1:79:70:42:9d:c8:de:77:ad:82:ae:eb:
         2c:e6:77:90:59:c8:e5:4f:b0:5c:a9:f3:b2:dc:fd:0c:e9:53:
         d8:14:a9:36:da:84:41:a5:86:ba:2f:23:fe:51:fc:26:a9:65:
         1d:ea:18:f5:ff:cc:a7:fd:9a:68:d8:3d:ac:d0:30:fb:9a:5b:
         97:5a:0f:6d:bf:64:49:da:5d:a8:8c:08:16:ef:37:eb:39:e8:
         6f:82:42:1b:de:f7:59:47:d9:42:88:06:6f:5f:97:6a:bb:c6:
         8c:f3:78:73:13:2e:b7:4d:0b:b7:48:56:bf:79:22:a3:d1:ac:
         39:5c:07:d7:e9:2c:01:61:6e:46:1c:e2:80:a1:c9:cb:0a:03:
         ba:df:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:58 2026 by rpki-client