Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa
File:                     3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa (raw, json)
Hash identifier:          zrXD+juedHXcq8Wnc/zj2wFk7oYLXQFBItG3bNWO3O4=
Subject key identifier:   CA:73:E1:B2:BD:9A:77:7A:77:2B:77:FA:2D:0C:87:D0:D0:86:1F:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE85B635C8B3FEDA07901700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396596
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:b6:35:c8:b3:fe:da:07:90:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=6373b58d-eebe-4f2e-ba9b-f2bc4bd63314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:08:46:2d:b7:78:d9:93:c3:f2:a5:0a:96:
                    e3:d4:bf:1a:e8:7f:47:6f:13:8e:3b:55:70:e8:4c:
                    1f:2d:ee:19:4f:93:34:d7:74:3d:a9:34:63:74:6a:
                    19:24:13:6d:ad:fe:b4:ae:ff:d6:6e:8d:f5:b9:ce:
                    17:f1:10:0a:42:0c:be:65:a1:fa:37:56:12:91:d1:
                    84:5c:8b:82:eb:16:8c:d3:dd:2d:2e:98:1f:00:6e:
                    f3:7e:da:9b:07:33:50:4f:d7:74:2e:37:17:57:3b:
                    ac:01:e0:e5:8d:18:16:1e:a2:9b:d9:d0:01:25:fa:
                    0a:56:d2:24:09:08:98:b0:ef:db:9e:9c:56:b6:78:
                    b7:ea:a8:14:ab:29:a4:ef:42:63:ca:9c:7b:8d:77:
                    8d:e4:6c:f7:c4:aa:bb:05:29:67:8a:41:48:b9:c6:
                    df:78:51:4d:51:fd:77:68:0d:2b:a5:58:b3:56:cd:
                    bf:71:32:f0:98:58:3f:99:08:01:22:a4:19:49:c9:
                    cc:f7:3d:cf:d5:82:90:b9:e6:07:33:bb:f9:a0:09:
                    d8:03:d7:a4:40:54:7e:28:83:bc:70:dd:8b:ce:a5:
                    47:8c:26:a9:d3:b5:b4:8b:df:d2:5d:2a:2d:0a:c6:
                    62:a8:2e:61:33:6e:7b:57:27:02:47:c6:0f:a2:2a:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:E1:B2:BD:9A:77:7A:77:2B:77:FA:2D:0C:87:D0:D0:86:1F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:22:ac:14:1b:db:7c:41:57:19:f0:02:f3:b3:ec:42:89:
         45:4a:38:b9:48:83:89:05:58:5e:dc:47:4c:0f:ff:f4:c7:e6:
         45:37:ce:13:0e:e2:96:a4:28:ef:75:25:dd:2e:3b:b8:37:42:
         31:e6:9c:8d:b7:98:cc:ec:42:52:1a:ab:f5:97:ad:a0:34:75:
         3c:1b:6c:48:97:d0:86:88:fa:b4:75:6a:b6:17:bc:61:73:32:
         b1:31:25:a7:dd:11:e3:ea:6c:f6:b1:a3:3c:86:7b:1b:1c:f1:
         ca:cf:59:67:0a:f6:22:28:20:79:4d:ac:7a:a5:bb:1c:6f:26:
         a5:04:1b:33:c9:cd:83:0e:b2:5b:24:ef:43:43:b7:31:57:9a:
         85:ef:1f:c6:af:b0:9e:5b:2e:b0:be:12:de:7c:63:3a:5c:85:
         8f:db:46:fc:67:1c:5a:de:3f:bb:ec:00:66:89:8d:9b:52:7a:
         58:77:bb:15:19:5d:3c:dd:de:2a:fb:4e:0c:e0:bb:ed:75:6c:
         ea:bf:46:47:74:c4:a1:44:1d:62:a5:5f:2c:9e:06:45:93:6f:
         20:5c:d9:db:42:40:ed:90:5a:3c:4a:c5:56:41:0e:e7:cb:2a:
         0b:bc:0d:93:c8:69:33:09:41:76:1e:01:41:7f:92:83:af:d4:
         6b:10:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:10 2026 by rpki-client