Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa
File:                     40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa (raw, json)
Hash identifier:          LJ6k2EszPgwMHYGopZyBNDeB2tXY0xgM2tIWwIROroE=
Subject key identifier:   C0:71:4D:B8:53:98:BE:FA:B0:18:12:52:98:D6:7F:4E:CB:05:F1:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E000632D13C5CFBC889D8AC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     40717
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:32:d1:3c:5c:fb:c8:89:d8:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=345359e0-7b3f-4326-888a-4c13ee2621f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:4a:e9:04:a1:ab:89:bb:04:ed:47:80:0f:
                    a8:ef:0c:0a:1a:5e:f2:20:49:c4:af:53:a9:a6:34:
                    95:7b:0c:cb:47:8e:ac:4c:23:56:2c:8c:41:ac:28:
                    25:64:55:82:53:23:5a:8a:22:79:73:a3:2f:8a:34:
                    4b:86:ca:87:6c:75:ca:aa:3e:07:b9:97:45:1d:da:
                    76:6d:e8:c9:11:bc:68:8f:3c:73:86:3d:e7:66:94:
                    a5:73:b8:00:75:3e:3c:4e:55:bc:cc:ca:bd:7d:fe:
                    04:bf:9c:6f:a7:79:80:80:21:0c:34:71:1d:48:2c:
                    f8:c0:09:47:49:55:b1:66:3a:92:52:bb:d2:01:d2:
                    cc:23:82:cf:04:65:3e:97:2d:db:88:32:4d:fe:45:
                    dc:54:bd:4d:52:92:88:20:ca:d9:8d:32:99:9e:97:
                    b1:11:87:6b:b8:bc:52:c4:51:6f:58:52:4b:d1:15:
                    d7:18:8a:de:fd:28:db:ad:60:f5:04:a0:3d:6e:32:
                    b3:0f:95:6a:88:11:ff:26:65:8a:75:6d:2a:91:5e:
                    4b:f1:1c:45:8f:06:8c:53:54:5e:67:06:be:cf:ee:
                    cd:8a:a3:8d:f5:07:40:59:58:7f:36:9c:3b:ef:fc:
                    a6:47:67:d6:52:46:d7:46:07:10:68:63:eb:62:5d:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:71:4D:B8:53:98:BE:FA:B0:18:12:52:98:D6:7F:4E:CB:05:F1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:ae:0c:74:fb:3c:eb:87:1b:1b:cf:f9:b2:8f:5b:59:09:
         3b:da:bf:6b:4a:7c:6a:6c:3f:4c:0c:48:b7:02:bb:b7:79:01:
         6a:0d:14:a1:76:3f:b9:43:ca:cd:2e:cf:2c:2c:99:ba:39:14:
         eb:7f:1d:80:4b:bf:94:56:04:f1:67:37:82:e3:b7:8b:b8:45:
         45:6c:df:76:7b:33:98:d4:9b:86:57:c3:27:14:a8:4c:d2:66:
         d1:db:7a:97:3c:f0:36:48:ef:71:97:24:3b:87:85:2e:12:7a:
         da:d7:c5:44:4a:95:4b:d1:ad:ef:e3:7e:0c:cc:f2:b3:00:13:
         3a:2c:f5:58:75:2e:97:e8:fa:43:9b:ce:8b:2f:bb:dc:20:14:
         4a:77:4a:06:de:8a:f5:17:d4:e8:61:01:7b:4f:97:06:9c:d8:
         04:12:46:6e:20:95:2f:c1:a0:25:1c:cc:8a:48:02:c3:59:d8:
         1e:80:ba:41:70:a7:40:43:2f:c7:29:b0:1c:7a:aa:4d:38:c1:
         d3:95:9f:57:db:b7:79:33:ec:38:3a:14:52:0b:16:d0:01:98:
         72:f8:73:43:b8:f8:66:69:39:f9:7b:34:9f:e5:18:bb:2a:6f:
         bb:ec:88:8d:20:22:5c:d5:d0:f2:48:1a:4f:16:b8:23:77:54:
         ba:51:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:04 2026 by rpki-client