Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa
File:                     32962b64-768c-33be-8ceb-4673129998ea.roa (raw, json)
Hash identifier:          kJiEIDYYo4KXPgXWYYzbmwhzny1CaX0JduLQ6Ab6vPQ=
Subject key identifier:   11:06:6B:DB:C7:A9:97:54:DF:88:0A:20:69:A7:5E:61:5F:AF:37:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198E08E94524CC4FD59580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     36622
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8e:08:e9:45:24:cc:4f:d5:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=f4073aab-1850-4df5-a1f2-60ad0a30e8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:d2:8e:7e:5f:19:a2:bf:9c:fd:26:a6:2a:
                    d2:35:f9:2a:e8:bd:13:d9:3f:c3:23:6d:a6:03:e6:
                    43:2a:56:1f:af:a8:41:c9:4d:69:6d:2f:c8:26:1c:
                    5f:92:09:92:46:23:5d:5f:2d:ab:8d:79:5b:ca:97:
                    87:a0:5a:a4:6d:c9:b7:49:ef:b3:55:07:e1:0e:a6:
                    80:ca:4b:1e:87:11:0a:31:2f:c1:e7:c8:c0:8a:d4:
                    16:6e:e5:0e:81:ac:ba:56:23:5d:f7:0d:07:3e:ed:
                    7b:27:bf:48:c5:5d:ed:4d:27:ee:3c:95:75:73:24:
                    e6:7c:e4:88:25:3f:a5:69:78:15:93:ee:c1:c2:1b:
                    08:a7:d6:ab:8a:b9:df:f4:70:7d:12:57:c8:b9:b8:
                    bb:be:e3:c9:c4:07:6d:61:fe:a6:aa:59:d1:61:ca:
                    10:17:b4:51:3c:30:4f:cf:40:bd:11:3f:f2:7f:ab:
                    d1:59:7a:3c:d6:1a:9b:c6:05:7a:02:73:93:8f:e1:
                    bb:e0:92:1a:45:a7:8a:b4:64:ff:0a:7e:f3:4f:54:
                    01:ed:bc:c9:d1:24:0a:f5:ec:62:36:5d:a1:a3:02:
                    82:f3:b9:dc:ae:7e:51:31:2c:a9:14:42:05:97:ce:
                    2f:bc:bf:76:f3:55:21:38:4c:5e:69:5b:02:da:55:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:6B:DB:C7:A9:97:54:DF:88:0A:20:69:A7:5E:61:5F:AF:37:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:31:4e:df:ff:ae:2b:62:7b:a0:fe:f0:23:8e:54:16:d7:47:
         42:a6:1d:21:89:3c:aa:79:ac:13:34:53:48:e1:79:1f:77:80:
         b1:af:4b:8a:8e:42:95:37:0d:91:d3:79:80:bc:0c:b2:80:af:
         2d:d5:30:85:d1:2c:49:36:c3:99:4e:98:57:24:23:9d:fe:cd:
         81:7e:cc:fb:a3:83:03:ac:60:c6:ef:a6:cd:d6:f3:75:f1:0e:
         ef:b1:aa:5d:54:80:5b:f7:e9:f4:ac:43:7d:af:9a:27:64:00:
         23:ef:b8:57:a2:3d:85:d3:60:a4:fc:34:98:57:80:7f:1e:9d:
         74:58:a1:c5:c7:44:db:54:32:fe:f7:b1:9c:1a:95:78:17:07:
         96:8d:a4:65:b0:da:93:a5:2a:df:cc:47:c5:3c:ee:0d:b6:5d:
         f6:56:51:be:1f:36:8d:f1:2b:df:45:83:f0:6a:17:82:e1:62:
         3f:f2:77:4b:6f:08:52:e0:a7:69:c4:35:d0:87:fb:6d:39:09:
         94:7c:3f:61:5d:4c:9c:6a:62:ed:9d:e9:42:b3:eb:40:91:b3:
         28:07:66:f6:af:f1:c4:1b:8f:86:72:9f:d8:9e:1f:a7:a1:e1:
         66:dd:61:cc:06:71:ea:8a:82:92:18:ba:bf:2f:18:5c:66:85:
         7c:05:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:14 2026 by rpki-client