Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b26d4e3-8a6e-3fce-8bfb-6ccee6de2339.roa
File:                     1b26d4e3-8a6e-3fce-8bfb-6ccee6de2339.roa (raw, json)
Hash identifier:          Sj34lOuGmpqDomC5rLMhS+JFwPnx28RuxzLm3Pr6Kjs=
Subject key identifier:   DD:C1:97:B1:D4:D7:C9:C2:DB:5B:0F:2B:FF:F1:E3:BF:2C:EA:0D:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B5AD2B6205DA42004B398
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b26d4e3-8a6e-3fce-8bfb-6ccee6de2339.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     211369
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5a:d2:b6:20:5d:a4:20:04:b3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=6a39fba6-de4b-4ebb-aad0-f0143cc656f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:75:8e:b9:bc:bb:8f:a3:48:83:4e:13:7c:
                    7c:68:60:d6:51:13:99:f0:ce:5c:03:d4:a9:bd:1f:
                    aa:3b:d6:5d:42:86:56:a5:1f:94:b8:42:1d:6f:be:
                    36:9b:18:f1:e4:81:af:77:3a:af:7b:82:12:04:69:
                    60:60:71:0c:81:58:58:8b:69:a3:91:fc:a2:d7:37:
                    4b:8c:2a:de:18:b2:50:85:cd:c5:23:ef:04:aa:4b:
                    69:4b:1d:be:8c:fb:85:f0:77:23:bd:57:9e:48:7b:
                    4f:06:7c:66:55:d7:32:60:c4:ae:a2:3a:41:e3:81:
                    0e:76:e5:96:06:9c:63:6f:2f:3e:29:7c:63:50:94:
                    9a:5e:66:0e:00:d4:f3:aa:be:f4:35:cb:41:1c:da:
                    7f:8e:9f:f0:e2:38:62:4c:54:0b:3a:e4:4c:23:4c:
                    37:d0:5a:b3:ad:77:06:6a:50:db:3c:89:a8:61:33:
                    1f:15:44:42:f4:bb:83:9f:b5:01:4d:a0:00:27:41:
                    67:36:fc:bf:33:61:fc:1a:ac:35:2e:76:0f:da:5e:
                    9b:ff:e1:f6:bd:4c:e4:10:d3:ec:6a:b0:c8:75:8d:
                    ef:6f:5c:53:1e:02:b4:4c:71:65:e3:ae:fe:83:40:
                    cd:8f:d0:40:2a:f3:c5:78:a1:0c:77:08:72:5f:e1:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C1:97:B1:D4:D7:C9:C2:DB:5B:0F:2B:FF:F1:E3:BF:2C:EA:0D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b26d4e3-8a6e-3fce-8bfb-6ccee6de2339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:f7:00:2d:56:27:c9:d5:87:1c:d8:2f:f4:f2:60:f6:b8:
         3d:d4:ff:f5:61:0b:a6:4e:3b:ad:0d:76:de:d9:ef:8b:46:76:
         af:af:22:e8:48:4f:8f:3e:2c:11:9e:d9:69:1b:01:8b:1b:d4:
         41:cd:46:df:97:d3:b4:80:64:7d:23:29:e5:e7:a5:6f:32:f4:
         cf:2d:15:94:bc:93:7b:11:4e:a1:e4:47:df:7a:4c:09:17:aa:
         47:65:1a:62:3d:64:4e:29:03:13:e6:03:bf:18:30:18:65:c3:
         64:9d:f0:c9:2e:2e:ca:ab:ca:87:bc:04:74:d1:3d:9d:c6:28:
         3d:8a:6f:ec:03:06:08:1d:ec:3f:27:74:22:b4:e1:87:ac:3c:
         2f:72:c7:f6:fb:71:b4:0c:fd:2e:a8:30:12:8b:0d:a2:dd:8c:
         76:21:79:da:77:10:e6:9b:85:d9:05:24:d7:3e:0e:82:07:26:
         6f:fa:24:45:38:fa:a1:c4:02:09:f2:e8:96:c7:a4:75:36:1c:
         8f:d5:f4:8d:4c:e0:83:2c:98:62:17:70:08:91:cb:aa:9b:da:
         64:b4:e7:2e:0e:db:f1:85:22:ef:00:2e:8b:9a:db:2f:38:b0:
         82:ef:ac:20:64:70:2c:7b:9d:08:d9:d7:08:fd:d9:cd:01:c4:
         bd:55:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:47 2026 by rpki-client