Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa
File:                     3657ce32-2ed6-3d85-8046-d42eee12cf33.roa (raw, json)
Hash identifier:          ZnHKkXT6/+0ilKmHehpYRKKGTd/qpxrUlRJwe0gjgTk=
Subject key identifier:   0B:B4:A8:A5:41:8F:77:64:F1:26:22:75:AA:0D:02:A7:6E:36:D7:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C6C12FDA1D3F947D67480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396617
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6c:12:fd:a1:d3:f9:47:d6:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=610894d4-7ff6-4d14-8830-07a93e6c4bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:4b:fc:5b:27:57:ab:6a:8c:a0:c9:03:15:
                    ee:5f:99:fa:1b:f7:40:7a:f4:d0:9f:9f:a7:dc:7f:
                    97:5f:de:31:b7:51:84:ec:5a:e1:1d:c2:2f:05:7d:
                    54:26:9b:aa:e6:2a:66:43:be:df:4c:bd:37:c9:07:
                    48:eb:66:a7:8d:97:88:50:cf:d3:dc:16:4c:4c:df:
                    45:3d:82:fb:0d:06:86:a8:f2:0d:5f:ab:35:6d:d2:
                    9b:12:04:23:24:ff:e3:eb:e3:45:95:fa:d1:cc:bd:
                    e7:4a:71:cd:a7:f6:80:df:57:80:10:e8:18:10:fe:
                    5c:5a:43:02:b4:c3:1d:44:7f:6e:eb:8b:4c:1a:fa:
                    a6:a2:0c:f5:61:2d:12:2b:cf:91:3d:a9:4e:ed:cd:
                    de:4c:e0:68:e1:92:6d:80:51:63:1f:9d:26:04:03:
                    f4:0b:b2:27:06:1a:38:a9:b2:e0:db:4a:8b:93:35:
                    33:8f:33:c4:21:8f:ba:eb:fa:cd:70:d1:c3:87:90:
                    e7:1e:40:22:2f:07:56:64:40:19:e1:d6:1d:a0:d0:
                    b0:a8:23:bc:33:1d:03:2f:b0:ac:54:48:c1:54:3e:
                    f4:45:bb:ce:b1:2c:96:17:2e:0d:82:94:dd:66:e2:
                    84:97:86:fa:47:91:85:9e:c8:a8:ba:bc:28:5a:34:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B4:A8:A5:41:8F:77:64:F1:26:22:75:AA:0D:02:A7:6E:36:D7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:48:66:ad:42:36:35:9a:84:0b:e6:b4:85:99:1b:4d:06:
         a3:7a:a1:83:25:79:92:55:fe:be:da:3a:02:eb:7c:0c:d7:f4:
         f6:9e:58:e9:31:37:ab:6d:28:d7:f8:0e:ac:ac:d3:01:e0:83:
         ef:03:4e:ba:30:7b:f1:96:e5:6e:e7:d0:8e:72:38:91:bc:6f:
         c0:8d:cc:39:9d:85:46:28:55:69:fb:21:a1:5f:58:58:8c:fb:
         ec:5c:a8:58:35:02:82:db:0c:9e:16:f2:89:67:c9:8e:73:d8:
         df:2b:af:a3:e5:ce:30:a7:0e:23:65:92:1c:29:45:a9:e7:08:
         ff:f6:e3:a2:81:a6:64:c0:72:1e:97:37:3c:ad:0f:0b:d3:44:
         80:79:c6:d7:5f:9e:3f:f5:9b:73:d2:1a:34:df:c1:cc:eb:17:
         13:8f:92:09:cb:20:44:45:98:a0:12:36:8e:9a:10:37:54:ac:
         39:81:56:46:37:31:40:d2:bc:dd:ba:f6:a1:4c:1d:4b:75:a3:
         ee:8b:37:7e:6e:c9:95:b8:0b:c5:aa:40:0c:de:ec:a8:7c:c0:
         c7:9f:86:17:b9:0d:b9:a4:3e:a3:5d:ea:22:f4:72:87:ad:56:
         e7:61:fc:95:fd:c8:fa:a5:2c:6f:33:fe:97:3c:f8:4c:3d:70:
         49:4b:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:42 2026 by rpki-client