Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/581f5080-6f07-367f-abab-ddd7a7fb6877.roa
File:                     581f5080-6f07-367f-abab-ddd7a7fb6877.roa (raw, json)
Hash identifier:          xxF9ZG3ccAKA8PW7gBNuohM2BBBhQMxw7ogbV0UXIow=
Subject key identifier:   9E:5E:ED:64:B5:A0:B4:3E:90:BD:27:9C:B2:36:A5:B1:E1:AD:94:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDBBB160532E3F2AC670C8080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/581f5080-6f07-367f-abab-ddd7a7fb6877.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     396589
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:16:05:32:e3:f2:ac:67:0c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=b431be48-2d54-44c5-adfc-325d8dcc80d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:f9:34:a3:4f:e8:c0:50:57:03:43:18:a3:
                    e4:55:62:19:57:f1:49:9b:57:80:0a:dc:f6:78:f5:
                    75:52:71:a3:65:f5:b6:03:55:86:37:0d:9d:2d:0b:
                    58:c5:e3:72:03:86:9c:77:e5:65:48:47:74:60:23:
                    db:f2:e6:65:4c:7f:cd:a7:72:8a:fd:b2:ec:b3:3c:
                    3e:e5:f4:b6:6c:59:f8:90:5d:5f:94:18:ac:b6:61:
                    37:8e:59:5d:5f:88:5d:32:eb:4e:fd:a7:04:40:3b:
                    81:6f:c0:9b:65:3f:67:50:57:d9:94:71:1b:80:c8:
                    27:7a:ea:39:ad:29:30:bc:66:f1:6f:3b:eb:27:70:
                    48:34:c6:5f:9a:d2:ff:e4:5c:ae:d5:60:c2:2c:e0:
                    db:6c:c0:e3:a4:e3:05:27:3d:ce:d8:89:5f:07:1f:
                    b0:26:83:2c:66:d7:c1:f6:7a:de:16:ac:35:06:eb:
                    e0:bd:9c:d1:25:0d:a3:cb:9a:c0:3b:a5:d0:49:ba:
                    78:8b:4e:5c:73:e6:c0:3e:70:99:4f:a5:79:39:f7:
                    87:8e:12:4d:5b:f2:36:cc:d4:ee:52:14:6e:6b:1a:
                    f9:d6:ed:47:57:9c:c2:05:58:60:02:07:ea:aa:f5:
                    b9:f9:43:c7:33:5c:5d:82:98:06:d0:dc:c9:bc:45:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5E:ED:64:B5:A0:B4:3E:90:BD:27:9C:B2:36:A5:B1:E1:AD:94:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/581f5080-6f07-367f-abab-ddd7a7fb6877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:af:1b:d3:56:84:bf:5e:8c:d1:ae:10:a9:d6:37:0c:fc:f3:
         11:af:0f:a6:d1:92:f0:42:f1:db:c1:7f:b2:a2:20:91:f6:b1:
         b6:92:7e:b1:f2:a7:79:4b:cd:53:31:30:55:e6:a6:13:53:a5:
         92:63:99:21:8d:cd:e8:83:21:7f:24:fe:db:67:bf:25:d3:fe:
         68:94:69:a8:14:6a:c7:cd:5c:d3:a3:1d:4a:78:6a:d1:2e:39:
         e0:de:b2:16:43:8e:be:e3:6c:87:98:34:9d:c9:78:da:3f:b9:
         de:71:15:2b:2b:4d:c8:47:0e:31:b9:5d:93:6f:99:02:00:eb:
         91:91:05:b8:1b:40:f1:72:41:81:10:53:f4:44:a7:3e:07:f9:
         18:6b:43:e6:de:e2:87:d9:31:33:32:d9:15:c4:27:b2:93:b0:
         a3:59:29:3b:f8:46:37:ef:2a:69:37:5a:e6:d1:a1:28:df:a9:
         69:de:60:8d:59:99:f9:8a:a0:6a:4a:5d:f8:e2:7a:76:69:73:
         c0:2e:29:9d:b2:38:96:0b:02:87:82:48:5f:d3:34:34:d1:6a:
         33:c0:5c:6a:24:c8:70:e0:7f:53:bb:8b:2a:56:4f:15:fe:a7:
         e6:4b:10:4a:d4:70:1b:50:e1:d9:c0:f2:a9:8a:0d:a6:80:5d:
         98:54:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:39 2026 by rpki-client