Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3744bc-eec1-3aab-b65c-f91f6b41724d.roa
File:                     2a3744bc-eec1-3aab-b65c-f91f6b41724d.roa (raw, json)
Hash identifier:          xOs2QGSBfAbgwc0Hhf52TdHNO76mznTd3nezJnWUiB8=
Subject key identifier:   FB:7F:36:44:BB:81:3E:4E:A5:63:E1:88:C0:53:61:C7:CB:22:12:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B81A5E894A36F1912BE0B
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3744bc-eec1-3aab-b65c-f91f6b41724d.roa
Signing time:             Thu 04 Jun 2026 14:26:44 +0000
ROA not before:           Thu 04 Jun 2026 14:26:44 +0000
ROA not after:            Wed 02 Sep 2026 14:26:44 +0000
asID:                     36624
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:81:a5:e8:94:a3:6f:19:12:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:44 2026 GMT
            Not After : Sep  2 14:26:44 2026 GMT
        Subject: CN=a6d968f5-5844-4027-9c80-6e70b9425555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:4b:41:00:2b:f8:08:4c:19:6f:f9:46:00:
                    d8:85:d2:ce:37:c3:f4:e5:14:53:1b:50:79:d9:28:
                    04:e6:23:56:24:01:1b:1e:0b:8c:4b:35:38:f3:00:
                    bd:5b:ab:cf:0f:38:34:28:16:80:e6:6e:2c:dc:3c:
                    91:3f:f5:76:99:65:00:a4:49:06:1a:57:5c:b2:37:
                    9f:4b:27:fd:3f:23:a5:af:f6:55:98:d1:98:f9:4b:
                    11:44:6f:f9:fc:e6:c4:d8:a0:ea:45:1a:67:d2:72:
                    69:cf:fb:d8:d8:59:86:64:a8:a4:a3:39:20:2e:f7:
                    59:6a:90:af:e5:c5:9a:ae:98:8b:2b:a2:85:f0:ce:
                    55:03:f2:ae:86:02:96:c0:b9:f8:93:ff:16:fb:b5:
                    83:1f:13:87:cf:0e:ad:cb:95:c0:9e:7c:1d:81:51:
                    44:e8:fd:d6:6f:6b:93:7c:95:f0:9f:35:2d:90:da:
                    14:d3:2f:03:04:e5:20:4d:bc:c1:68:30:f4:55:d6:
                    1b:44:5c:88:50:b4:76:04:57:dd:55:dd:c2:87:55:
                    42:5f:7c:6c:67:22:d3:a6:c6:6a:05:c6:db:d1:18:
                    38:d9:7b:8d:12:aa:d8:46:67:b5:b8:d6:14:6e:d4:
                    5e:52:90:ce:2b:b6:58:32:ac:0b:b1:93:25:a5:01:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7F:36:44:BB:81:3E:4E:A5:63:E1:88:C0:53:61:C7:CB:22:12:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3744bc-eec1-3aab-b65c-f91f6b41724d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:51:b8:e4:9a:14:e8:71:67:0b:3c:e8:48:f2:3d:76:16:
         72:ee:04:e1:80:a6:1d:0c:2a:f1:eb:1c:bc:07:74:17:b4:d8:
         f2:03:a6:ac:b5:c1:6f:4c:b4:59:42:ea:c4:0c:51:66:c4:13:
         bd:a8:58:ee:5b:b0:11:98:54:d7:b2:41:4b:22:69:68:59:3d:
         52:ca:bd:38:91:67:76:6a:e3:38:0b:e8:30:7c:ec:ed:b8:70:
         4a:ee:b7:30:1b:88:84:9b:50:1a:38:80:32:36:f6:69:a9:b9:
         b0:19:c0:43:7b:b6:14:b4:4a:f6:43:f6:99:c1:dc:dd:47:aa:
         2e:08:02:c1:28:2d:e6:12:c6:1e:3a:72:de:7d:e4:da:ee:5d:
         18:12:80:e3:28:c9:b5:67:ea:07:f8:d8:c4:11:5f:96:68:86:
         52:4f:0d:77:bc:49:b9:45:86:df:04:6d:0d:25:ff:f7:dd:62:
         32:25:5c:1b:24:a0:7d:ac:e2:ed:5b:ee:87:6d:7c:b0:5b:bd:
         0b:68:17:87:31:8a:39:3e:85:84:14:4f:2a:b7:36:a7:0c:d9:
         ca:0e:21:b4:58:d0:8d:42:2c:7b:3a:d6:01:1f:5d:ea:24:b8:
         78:b4:d2:28:8f:f2:00:eb:27:9a:ac:15:8e:68:e5:e3:ff:6b:
         ae:16:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:51 2026 by rpki-client