Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fb5d7d5-fbdd-3684-b015-000e2b0a0708.roa
File:                     5fb5d7d5-fbdd-3684-b015-000e2b0a0708.roa (raw, json)
Hash identifier:          GYg9JCri4V4McWkHnX97tECiOpvJfjGmhKS86fBzkAQ=
Subject key identifier:   64:A8:85:7D:E6:D9:54:98:8B:E2:CD:30:1B:D5:F3:21:CB:41:82:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00062D8E9E5E840ECEF80AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fb5d7d5-fbdd-3684-b015-000e2b0a0708.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396546
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:2d:8e:9e:5e:84:0e:ce:f8:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d8a585e5-6470-4261-8378-d4a612385313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:fe:8f:a1:13:9c:f8:e2:60:c5:2c:12:8c:
                    9b:cc:91:48:0f:18:38:46:61:1e:5b:ae:9c:77:e5:
                    11:6b:aa:39:21:3e:dc:a2:3d:2b:09:92:4d:62:24:
                    88:62:c9:ba:e1:46:04:9f:f9:3b:f7:82:de:27:cf:
                    33:66:42:93:c9:a6:13:83:65:8e:96:51:e3:a7:c2:
                    83:73:d2:8f:4e:5f:f3:5b:ce:44:4a:e0:64:46:cb:
                    5a:b3:0d:d5:a2:c7:fa:6c:a6:55:e2:b8:ee:2e:6d:
                    a2:53:fb:e2:bd:3a:c2:68:0b:26:08:7f:5e:66:b6:
                    5c:7c:79:40:d0:99:90:32:e3:b2:f9:07:50:19:92:
                    d5:8d:d5:31:2f:b0:c6:3d:f6:a1:8d:2b:f4:64:6b:
                    ec:93:8c:01:0c:5c:c6:b4:3e:c0:c1:e8:8f:3d:89:
                    61:51:07:24:13:f6:9d:17:25:a6:d7:aa:3d:55:06:
                    3a:6a:e4:5e:e9:50:19:b0:b3:7b:7c:89:05:fd:3f:
                    ca:c9:86:6c:29:2b:40:e3:5b:7a:59:e7:4a:ed:1b:
                    2e:a0:02:35:ac:1e:ab:2b:32:24:20:f8:8e:81:4c:
                    cf:91:2c:cc:b3:e7:53:65:71:11:43:27:e0:cb:fb:
                    77:24:41:1f:26:fe:ee:6a:a5:3c:b4:c1:14:27:e4:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A8:85:7D:E6:D9:54:98:8B:E2:CD:30:1B:D5:F3:21:CB:41:82:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fb5d7d5-fbdd-3684-b015-000e2b0a0708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:8b:d3:73:48:b8:76:26:04:c9:d8:5b:d4:21:0d:0e:fe:
         e7:de:79:ed:9c:b6:57:35:40:bb:13:b9:8d:7e:b0:7d:66:61:
         cd:ce:63:e2:f7:cc:77:83:e7:34:da:87:38:54:f5:42:b6:4c:
         85:cb:33:8d:de:83:c5:8b:61:9f:43:4f:be:c8:55:f7:23:d9:
         89:50:6f:95:30:54:fd:96:17:32:38:2d:2a:27:fe:1e:47:37:
         05:96:97:6f:9b:23:7e:6d:0f:85:e1:cb:20:06:b5:c0:35:ea:
         0d:b4:d3:52:77:b9:b1:b1:b1:26:56:19:cb:85:18:1f:29:a1:
         56:3f:9f:0c:73:a4:2e:9a:7e:01:3f:fb:5e:c6:40:e7:b0:67:
         0f:5b:0e:82:ca:36:14:8f:d0:df:5a:28:32:96:8b:ac:71:79:
         c1:d7:9e:a6:5a:5d:9f:ef:c1:91:a3:d0:ea:67:e1:91:4e:a8:
         5c:31:f1:ca:72:77:d8:38:8a:1c:7e:ee:2f:50:50:4c:e7:44:
         52:02:b9:92:e8:a7:b1:13:53:fe:9f:4f:7e:66:ab:bd:65:b2:
         b3:86:44:4f:0e:bc:91:2b:aa:86:aa:e4:a0:85:13:41:df:2c:
         eb:2c:67:90:2b:2d:32:8a:de:da:b4:93:ae:36:5a:89:f1:42:
         4e:a4:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:17:30 2026 by rpki-client