Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627b93df-5e84-3fc5-9ece-dab2e785c750.roa
File:                     627b93df-5e84-3fc5-9ece-dab2e785c750.roa (raw, json)
Hash identifier:          8cGUpFI/G/0UpoKaN9cu2307c7sEvTa0h6F3twskjxw=
Subject key identifier:   7F:E2:11:AA:C1:45:E1:36:47:4B:AF:7E:1C:43:87:FC:3A:4E:5E:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B8583CB385694AC0A1580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627b93df-5e84-3fc5-9ece-dab2e785c750.roa
Signing time:             Thu 04 Jun 2026 14:26:45 +0000
ROA not before:           Thu 04 Jun 2026 14:26:45 +0000
ROA not after:            Wed 02 Sep 2026 14:26:45 +0000
asID:                     36620
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:85:83:cb:38:56:94:ac:0a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:45 2026 GMT
            Not After : Sep  2 14:26:45 2026 GMT
        Subject: CN=3fdb46d6-47d6-4a3f-bcbe-4ede0c7226da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:ce:7c:97:16:2b:88:d7:a1:c8:d0:65:ad:
                    03:72:f6:2a:6b:73:9c:a0:92:f0:fc:05:00:6b:4a:
                    50:bc:58:9b:51:cf:34:43:1a:41:47:4d:2f:ed:30:
                    22:46:b7:db:28:f5:06:81:60:99:44:75:22:07:bd:
                    23:15:1a:f0:27:4b:4f:67:6b:18:c8:1b:e4:69:57:
                    c0:fc:1b:96:7e:bc:5f:49:e7:62:b1:88:39:f6:0a:
                    4c:6e:20:41:7a:4a:f5:f8:cd:fb:31:0f:4d:89:c1:
                    ca:bf:61:0f:2d:8e:67:6e:45:3b:1c:3f:62:7d:2a:
                    f9:ef:89:88:73:48:03:e8:f9:5e:ce:0f:b5:ea:7d:
                    ea:67:15:75:34:63:7d:f3:6a:bc:e8:2b:f0:bd:44:
                    c8:ca:5c:91:df:fa:bd:ff:e6:36:19:7c:2e:7c:6e:
                    e6:76:65:33:d5:aa:78:80:7b:a5:3d:4e:47:f1:11:
                    b5:a3:ef:98:c1:6f:ba:d2:6e:d5:6d:38:d7:f1:fc:
                    1e:91:a6:9e:a1:3e:1d:31:90:82:29:d1:9f:6d:27:
                    df:4c:06:b8:22:4c:79:85:36:a5:87:ed:de:be:15:
                    1d:42:0d:9b:cc:ee:d4:22:54:8f:cc:cd:cb:fc:52:
                    50:af:68:7c:d8:68:bc:aa:f7:19:a9:3b:47:f0:d8:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:11:AA:C1:45:E1:36:47:4B:AF:7E:1C:43:87:FC:3A:4E:5E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627b93df-5e84-3fc5-9ece-dab2e785c750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c8:3c:97:4a:c5:d0:d2:df:2d:a8:ab:3b:e3:00:17:70:44:
         44:75:77:50:33:6e:8b:3a:08:71:97:ba:df:cb:58:e0:51:e7:
         ce:a2:ec:c1:81:e5:f2:d0:a5:b7:5f:51:dc:ee:31:df:a1:42:
         07:29:fa:f5:f0:86:4e:5a:84:24:8c:e6:91:85:4a:7c:78:4f:
         5b:c1:eb:19:f3:9d:a0:bc:8b:62:7c:a2:ce:d8:01:9b:7a:35:
         6e:b1:b5:4e:60:3d:c9:c9:42:0c:87:99:d9:24:36:31:6c:28:
         cc:92:52:b9:c9:9f:65:f6:34:15:d7:18:17:3b:14:85:86:2f:
         a3:34:fa:40:f0:9d:55:69:60:ed:ea:11:53:f1:a6:ab:1f:18:
         a0:89:c0:83:62:70:33:2f:46:2a:76:2b:ba:0e:14:0d:3e:e8:
         63:e6:25:d3:55:8e:e4:51:fe:85:58:c1:11:56:35:c9:38:f8:
         8b:2e:f6:2e:d1:97:8d:3b:cb:0e:37:c0:51:db:bb:94:63:58:
         68:f4:62:9d:db:f7:83:8d:72:98:70:c3:b2:54:15:cf:b1:9a:
         ee:8d:61:1c:6d:44:74:05:4f:83:66:6d:bb:65:67:bb:76:10:
         3c:d2:ca:29:bc:b3:5b:6c:76:d8:4e:fa:c3:6f:24:c5:6c:3a:
         7c:16:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:24 2026 by rpki-client