Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a66f87-ec29-34af-b7fd-6f331f98f71d.roa
File:                     22a66f87-ec29-34af-b7fd-6f331f98f71d.roa (raw, json)
Hash identifier:          5QMbVfyPyfTl6fBWIpSybd3WOE3oAFkkpJlMf4mKE1A=
Subject key identifier:   FA:21:62:71:93:EE:09:33:AC:E2:0F:0C:AD:F2:31:0D:2D:3A:0C:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B30239D37634B2D0FA900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a66f87-ec29-34af-b7fd-6f331f98f71d.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396606
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:30:23:9d:37:63:4b:2d:0f:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=7933f595-6a8c-469c-b8a2-8898e0ef0689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:b5:d5:c3:2c:fb:79:28:76:a9:b4:14:70:
                    49:1e:2c:c0:dc:37:fa:d3:fc:a4:e6:17:4d:09:c4:
                    78:25:8f:03:eb:b5:8c:53:6d:f7:d3:97:65:41:f4:
                    06:43:fa:4f:65:92:35:f6:f8:71:79:e5:30:56:30:
                    1f:f6:b6:fd:4f:df:e1:28:5b:e1:e5:63:8a:72:e6:
                    a2:b4:c9:fd:cb:35:84:ac:6a:e9:da:9e:1f:ce:e5:
                    1d:e3:77:6f:61:ca:14:67:de:79:a0:36:6c:03:ca:
                    23:c1:95:43:4e:38:5f:27:cb:d1:7a:18:bc:8e:81:
                    03:52:c5:4a:4f:03:6b:bf:77:4c:bc:68:f1:be:7a:
                    8f:56:63:30:30:ff:69:b9:c0:1f:10:c0:17:e6:1e:
                    2b:4c:69:6a:f9:46:8b:7e:d8:7b:50:96:52:84:ed:
                    89:8b:f2:6e:90:82:17:7b:dc:40:13:fd:a6:9f:6c:
                    69:35:2a:fe:b7:16:fe:12:33:f9:44:2f:4e:e0:86:
                    d7:70:a7:c5:39:65:aa:00:c0:43:4c:ff:aa:92:13:
                    0d:72:a7:ba:00:a5:07:93:a1:36:63:73:2e:04:f8:
                    69:e8:a2:36:08:6f:1f:fc:0f:40:c0:6c:6d:84:34:
                    62:3d:02:a7:aa:67:62:05:77:42:0f:e1:c5:1c:ec:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:62:71:93:EE:09:33:AC:E2:0F:0C:AD:F2:31:0D:2D:3A:0C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a66f87-ec29-34af-b7fd-6f331f98f71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:c2:2b:ad:c4:eb:5d:ba:2a:ad:d5:c4:40:99:b6:76:5b:
         e1:b1:8a:14:8f:24:8f:f8:c8:2c:1c:f0:67:ea:de:a0:4d:73:
         fd:05:9e:f3:de:f4:98:39:ca:6a:00:4c:77:6f:cb:4b:94:2d:
         22:81:6f:b6:2e:39:85:60:a7:d6:30:c2:cd:98:cd:6d:bc:9e:
         0e:96:24:1c:73:16:a8:8b:b3:f6:b1:3e:45:40:43:55:99:f8:
         32:65:6c:10:8f:73:2e:87:7d:f0:a4:d0:79:23:71:15:db:11:
         bd:bb:74:bc:f9:54:a7:a2:08:6d:7a:71:26:c9:23:0b:3f:cb:
         33:34:e6:52:1b:1f:a2:03:46:b1:bd:2d:ab:45:f4:de:b4:64:
         16:86:63:cc:c8:e0:4b:eb:5b:af:28:3f:4e:41:79:9b:7f:8d:
         1b:bf:8b:08:4b:cd:b9:ce:4b:91:da:b7:3b:d3:01:96:c9:ce:
         60:a9:eb:b6:0b:9f:b9:7a:d0:07:b2:02:81:dd:6d:c0:0a:de:
         0e:ff:71:16:0a:50:b4:13:87:35:92:ab:36:25:87:1e:e0:c7:
         4c:16:2e:47:ef:54:d1:0f:ed:22:0a:72:8a:c3:c2:5e:2a:53:
         89:ea:91:9c:db:70:1a:b0:35:31:97:d5:b8:62:a6:2d:ad:5e:
         06:c1:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:38 2026 by rpki-client