Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
File:                     20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa (raw, json)
Hash identifier:          vKZXmrSZ4S0day7tRf3YsHWkZsZwBnWiZxw56Eia+Hc=
Subject key identifier:   B6:9E:35:44:C0:2A:F4:01:58:27:9C:E1:59:D4:62:B4:0F:94:4F:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00063197DD08F5DC07A9DA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396550
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:31:97:dd:08:f5:dc:07:a9:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=c5b7228e-d6fb-4d28-8fd5-4c865111c58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:b6:b3:65:99:dc:43:b2:f5:ba:ba:7c:4f:
                    24:b8:72:e1:20:b2:b2:4b:a7:f4:ab:6c:09:9a:b5:
                    13:d4:4b:2a:f3:c6:24:f9:f8:19:b6:5a:6d:e8:05:
                    ff:26:bc:f2:f7:0b:6d:00:9a:38:5e:ef:54:93:3f:
                    80:4e:cf:be:7e:af:4c:93:fc:30:7f:db:87:5f:ea:
                    c4:07:7b:a2:44:5e:98:1d:1a:9b:f6:9e:21:92:9f:
                    55:f9:59:52:5d:d1:58:ec:28:9f:1f:73:c1:6e:93:
                    57:f9:8b:36:68:8e:03:ab:3e:5b:90:a1:c9:3d:a9:
                    61:46:b9:a6:3e:5d:ff:ff:9c:b9:59:cc:d0:60:4e:
                    e5:a0:0f:0a:ca:5c:70:f2:e5:e9:12:32:41:e0:0d:
                    2e:50:31:57:cb:6d:ee:f8:ad:65:2f:2a:c7:da:97:
                    38:68:d9:ee:6d:ba:a5:7e:39:31:e8:3b:3f:13:93:
                    37:88:4d:70:2a:06:6d:41:39:12:af:ab:22:ca:82:
                    9a:66:17:b4:f8:c3:ec:f5:53:84:ae:72:c5:c9:87:
                    21:2e:76:30:c3:90:78:91:3b:38:8e:50:37:9d:eb:
                    6d:5d:00:c1:26:3a:d3:52:00:30:99:2a:6e:54:df:
                    62:00:29:c8:e0:a5:86:e4:d9:c8:43:5b:df:81:9d:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:35:44:C0:2A:F4:01:58:27:9C:E1:59:D4:62:B4:0F:94:4F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:18:a5:91:b0:5e:c0:fb:17:d9:74:38:6a:b7:cc:1d:c3:c9:
         ee:98:2b:9d:67:08:ad:a9:cc:ed:83:21:ff:a0:a7:d6:1a:46:
         dd:6c:b9:89:a9:ef:5b:32:1c:8c:a0:01:c0:64:1d:7a:cf:7d:
         cb:f3:7c:65:3e:bb:41:6e:ba:f1:d3:a6:a9:f4:84:4f:1e:05:
         38:fe:94:fd:97:ce:5e:c0:10:65:d5:13:3d:a1:74:58:df:34:
         5c:6a:e5:ab:9b:51:3e:81:22:3c:11:5b:70:7c:7d:76:0d:a2:
         78:65:ae:38:31:f9:0b:15:19:15:54:42:b9:3b:be:9a:c5:eb:
         36:a3:70:66:82:8c:1d:50:27:b6:30:99:46:f8:30:54:f6:3e:
         70:06:65:1d:4e:9e:23:7c:0a:22:b4:7f:1e:60:05:9c:7e:3e:
         3e:38:97:00:7e:55:06:a5:6e:70:a1:a9:f8:ca:ab:c3:af:b5:
         5d:ba:97:4f:b6:1d:0b:ed:37:d9:eb:25:3c:68:07:5d:ba:db:
         3f:b5:2b:55:ab:f4:00:6c:f3:c3:a9:d7:c2:f4:d4:b3:cc:2a:
         09:ec:bd:ee:09:73:15:cf:b0:88:5c:22:5f:06:97:6a:d9:78:
         4c:3b:82:fd:de:1f:09:f7:95:25:7b:b5:32:ef:5c:f2:40:f7:
         37:bf:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:21 2026 by rpki-client