Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa
File:                     38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa (raw, json)
Hash identifier:          sitdcjZ2weEsj/iSnDkg7rRTfhaybZELxhiaFpLYBs4=
Subject key identifier:   39:53:4F:92:77:E0:B5:16:F3:47:0D:79:EA:B9:5C:6B:D6:C4:D2:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB8E03C3534A406DCD7570
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     36631
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:8e:03:c3:53:4a:40:6d:cd:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=f6325b2e-dc0a-4691-b423-93201184b051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:12:41:1a:00:d0:dc:4a:47:d9:5e:e3:1f:
                    6b:22:22:93:08:9d:99:87:2f:e9:22:fb:b1:7a:bf:
                    5f:b9:bf:90:51:10:5f:6e:4b:6d:23:d7:1b:1d:c9:
                    3e:24:6a:9b:e4:90:71:46:4c:4a:25:86:60:15:19:
                    cd:a0:d5:72:c0:be:69:b3:74:bc:3e:51:8e:d0:16:
                    db:36:cd:ff:6d:b0:70:32:6c:bc:c3:ac:12:7c:72:
                    e1:23:40:7d:76:26:32:4e:ae:95:78:8a:75:56:e8:
                    c9:06:15:f3:97:9d:3b:8d:f3:e3:e6:73:bb:0d:d3:
                    35:c7:87:82:f6:4a:73:bd:15:3b:db:3a:a8:04:53:
                    69:22:24:24:e7:fe:d9:21:1f:74:17:ad:7e:2e:d6:
                    c0:60:f2:33:45:4c:4d:db:80:f6:62:45:c4:d1:bd:
                    10:f3:7d:e7:7b:1a:ae:ac:c5:ab:6d:18:28:60:79:
                    22:44:88:a6:00:9a:8b:28:1e:9a:fc:f0:87:cc:3d:
                    7d:79:16:5b:67:6a:a1:4c:56:5d:37:45:d8:55:4b:
                    9c:0b:e6:11:45:01:da:a7:06:96:78:33:e3:9f:b6:
                    0b:33:ea:b5:4c:bf:c6:3b:44:1c:bd:d5:3e:bf:cf:
                    f2:37:8d:0e:da:b3:66:21:5e:8e:3a:6c:4a:93:7e:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:4F:92:77:E0:B5:16:F3:47:0D:79:EA:B9:5C:6B:D6:C4:D2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:62:ae:6f:19:12:1c:88:cd:e2:3e:dc:6a:91:28:a6:85:
         c5:04:86:47:0c:7b:59:fd:83:b0:46:4b:1b:58:ed:a9:5e:bd:
         10:c9:0f:43:1b:bb:6c:f0:d1:cf:1b:b9:e9:5f:ba:56:36:ac:
         86:15:ad:c6:f5:e1:46:95:63:34:37:f0:d1:46:e1:02:dc:25:
         22:f2:20:f7:fa:90:5b:c0:c7:91:33:37:8d:60:30:f8:87:8f:
         1d:44:2a:29:aa:da:77:3f:24:0a:8e:c0:64:d2:b9:5b:be:46:
         97:d3:ef:09:92:6e:a3:94:d1:72:10:6b:d8:22:fe:6c:4f:9e:
         e8:9a:6c:ce:3f:11:25:90:b3:7b:9d:4b:ca:ee:05:98:e0:3c:
         29:b3:66:89:09:3f:de:26:1a:06:e3:2a:11:06:1c:2d:48:36:
         8d:af:36:4c:3e:f1:b6:66:b3:8a:0e:50:80:be:2d:ed:6e:15:
         9f:1d:d3:d7:b7:98:62:7a:e0:8f:d8:78:42:03:e8:83:d6:b1:
         f2:b4:01:92:83:d7:b5:23:9e:75:4d:17:b6:3d:71:83:f4:4b:
         f2:7c:1d:93:c8:6b:37:17:f0:52:12:92:50:c5:5e:88:87:0e:
         65:b5:af:0c:31:b2:56:55:ca:3a:03:60:4d:a6:c2:05:75:c9:
         f6:c4:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:09 2026 by rpki-client