Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617ccc21-82ad-314b-b51a-8442656c4eac.roa
File:                     617ccc21-82ad-314b-b51a-8442656c4eac.roa (raw, json)
Hash identifier:          OHu1FKdNxMOYR2g06f476TvTnpT9ZrZBFzmQ43oDHFU=
Subject key identifier:   68:39:59:07:01:DA:FE:71:7D:28:F8:46:74:E3:99:37:C7:2C:D1:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F2500877E731F7AC11FF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617ccc21-82ad-314b-b51a-8442656c4eac.roa
Signing time:             Tue 02 Jun 2026 14:19:01 +0000
ROA not before:           Tue 02 Jun 2026 14:19:01 +0000
ROA not after:            Mon 31 Aug 2026 14:19:01 +0000
asID:                     396686
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:50:08:77:e7:31:f7:ac:11:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:19:01 2026 GMT
            Not After : Aug 31 14:19:01 2026 GMT
        Subject: CN=18dccfe3-d85d-4667-96ee-4437c913e122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:88:a6:9a:e3:4f:da:24:be:92:15:e6:35:
                    37:fc:26:aa:66:b9:b6:3a:2b:69:5a:21:3e:be:1f:
                    8c:b9:9c:a5:bb:65:12:12:90:8e:84:67:6e:cb:9c:
                    3a:b9:9f:04:5c:8b:e7:c4:60:ad:3e:61:00:e6:df:
                    ee:6e:63:f8:b5:0c:b3:e1:ca:81:b0:ee:b5:c6:fb:
                    72:8d:81:e4:0c:53:8b:6c:56:38:2c:1f:9b:53:0b:
                    4b:a8:0e:90:ed:94:bf:63:d0:16:2c:55:6b:6e:2b:
                    a4:35:22:50:44:da:a7:df:e3:27:59:7d:c3:79:4f:
                    18:17:9c:22:0e:2c:fd:3f:c6:a7:1c:ee:3f:1d:9a:
                    35:fc:b2:ec:04:a9:66:ee:5b:60:54:84:b7:49:af:
                    13:e8:ae:23:03:93:23:d0:c5:a6:53:3e:36:84:97:
                    79:ee:86:58:4e:df:7b:3b:15:21:68:fd:96:94:70:
                    93:fe:d9:0c:04:18:fb:22:c2:49:c4:d9:6c:4e:e8:
                    59:a8:d1:b7:90:f4:13:44:6c:7d:96:6e:e6:55:36:
                    db:35:99:e8:0d:d6:03:2b:e2:59:ab:8d:04:39:a7:
                    b7:d0:52:86:62:a2:6e:0a:57:4f:24:3d:25:c8:d1:
                    a9:0e:87:3b:fc:80:84:f6:06:a6:16:14:39:74:31:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:39:59:07:01:DA:FE:71:7D:28:F8:46:74:E3:99:37:C7:2C:D1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617ccc21-82ad-314b-b51a-8442656c4eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:e4:f0:e8:c8:c0:24:fe:7d:21:0a:ea:ff:74:eb:7a:61:
         2c:10:3d:49:9e:f5:53:05:4c:5f:97:f7:dd:88:88:bf:1b:fc:
         30:41:85:86:d8:75:76:09:4c:52:4f:97:63:50:76:9f:d1:d6:
         7c:86:14:55:cb:0a:04:80:b9:7d:45:d9:45:f4:30:5d:72:10:
         04:d5:ff:c0:3c:a0:0b:57:53:3f:b8:b9:44:8e:f9:82:d6:cb:
         d5:6c:ab:2a:e2:fc:c4:38:b7:f9:54:fa:83:bd:41:b8:f8:b9:
         bd:10:5f:ad:aa:15:24:05:09:a3:f6:26:35:44:5a:1e:91:70:
         34:e3:27:e8:a4:5b:42:06:ea:5b:59:4f:a1:b4:ad:0c:8e:57:
         1d:72:cd:fd:b2:07:61:76:5c:6d:10:0d:11:f7:9a:f6:18:cf:
         0d:53:38:9e:87:77:19:b4:e5:1b:c6:61:27:52:3c:83:63:33:
         26:ac:43:02:37:a1:af:26:b4:de:a9:94:01:3d:47:95:59:56:
         02:ee:bf:6b:c6:dd:d3:a8:ed:f0:7a:04:31:78:0e:3c:18:a9:
         7c:73:16:7a:fc:4c:27:ac:46:c5:75:b6:54:b5:21:dd:35:05:
         38:92:66:e5:db:8d:45:a8:9d:bb:ba:e8:56:52:e6:b4:ab:2f:
         7f:59:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:47 2026 by rpki-client