Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20c1b7ca-11b2-3bc1-bde2-83fba891d017.roa
File:                     20c1b7ca-11b2-3bc1-bde2-83fba891d017.roa (raw, json)
Hash identifier:          w0BRA5gvhRXtuF0/5jOwqsZuuKeuhftq/02sKfXWqmQ=
Subject key identifier:   39:6F:33:8A:52:D2:AC:7D:AF:21:B8:CF:C6:94:07:32:FA:98:28:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE85BC37266BD47228571200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20c1b7ca-11b2-3bc1-bde2-83fba891d017.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     397202
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:bc:37:26:6b:d4:72:28:57:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b8edd9ed-ba4c-4d4d-8a38-9127d2c27ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:d2:fa:ca:62:b9:b8:d4:3f:fd:37:f8:60:
                    78:1d:af:6f:e9:81:12:37:3f:e4:ca:99:46:5a:17:
                    d6:5e:58:62:5a:53:59:5c:cd:a3:9a:60:93:de:f1:
                    93:f1:ea:ed:e6:e6:86:75:e2:f6:37:13:d8:02:70:
                    52:1b:52:ea:06:0c:85:18:8f:68:fd:7e:12:21:f7:
                    2d:a8:2e:e8:b2:38:8c:67:77:b0:f8:35:f2:29:4b:
                    83:7d:fb:5b:63:a5:5f:bb:f3:aa:b6:40:13:19:5c:
                    47:a2:c9:95:d9:d6:8c:23:03:eb:fd:46:06:05:eb:
                    8c:bb:89:08:ca:bb:d1:18:3e:cd:3a:b0:c8:ca:65:
                    b8:46:87:d1:c1:fb:ee:85:81:0a:48:48:a9:b3:56:
                    ca:ff:60:18:2a:8f:fb:99:16:da:e3:c4:9b:f9:b1:
                    87:70:00:47:96:9d:1c:fa:5c:b8:a6:ff:2a:43:97:
                    90:75:4b:33:94:05:b0:30:76:0b:cc:a5:34:e2:45:
                    da:eb:e9:5c:e5:d4:f4:6c:17:84:ce:88:99:c3:f0:
                    1b:62:cb:a1:3c:f7:11:9c:07:28:45:67:0f:d6:84:
                    f3:d9:5d:86:47:c7:24:d5:e2:57:7f:d4:b8:d0:e7:
                    be:25:d1:ef:46:70:88:16:f7:b0:fe:5e:bd:4e:11:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:33:8A:52:D2:AC:7D:AF:21:B8:CF:C6:94:07:32:FA:98:28:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20c1b7ca-11b2-3bc1-bde2-83fba891d017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:45:63:b0:36:8b:4a:da:4d:e0:c8:c4:4e:39:64:3d:50:8e:
         ed:87:40:08:49:8b:50:fb:63:5d:cc:84:48:06:b2:aa:67:89:
         00:cc:e8:e9:ec:45:4c:f2:25:72:61:9b:f4:45:1f:87:5e:dc:
         6c:1c:32:ff:ed:e7:af:f3:4b:85:d5:2f:a0:52:dd:1a:97:81:
         98:ec:74:a4:e5:9a:2a:30:08:df:fa:0d:ae:c2:b8:ef:51:fa:
         af:d9:b3:a2:36:8d:71:4b:63:ea:16:05:67:2c:44:a8:97:10:
         19:b1:75:4b:5a:83:b0:c5:0b:88:6f:9c:e2:c8:83:e2:4d:e2:
         f6:61:cf:52:85:49:f0:02:92:45:69:0d:37:51:e5:76:90:bd:
         37:98:62:02:be:bb:0d:44:80:6e:80:b9:9d:34:f7:bc:02:a1:
         06:0d:53:2d:d5:57:f0:79:48:64:53:08:0f:8f:e0:65:13:2c:
         65:e8:a8:50:f4:1b:c5:8b:98:a4:92:82:87:be:b5:53:33:f8:
         39:21:e6:4d:01:42:96:68:58:e4:18:31:38:68:6b:68:1d:15:
         64:72:4a:82:bf:ea:55:35:2f:b8:53:d2:f8:5b:6b:a6:3b:ee:
         b8:84:7c:85:fd:9c:38:5c:6b:32:46:bd:5d:ad:08:b6:ba:6b:
         74:b7:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:08 2026 by rpki-client