Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66f6183a-a71a-3e1a-9d98-af7f60e8a53e.roa
File:                     66f6183a-a71a-3e1a-9d98-af7f60e8a53e.roa (raw, json)
Hash identifier:          BgW2/Jh0cboWueh+R5faXTJeGOtZw1VwRvPZuV6de78=
Subject key identifier:   E0:04:3D:BA:B4:AB:71:6C:AF:27:6A:57:FF:C2:CE:68:92:FA:A2:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F24EABEACEB5DADB44CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66f6183a-a71a-3e1a-9d98-af7f60e8a53e.roa
Signing time:             Tue 02 Jun 2026 14:19:00 +0000
ROA not before:           Tue 02 Jun 2026 14:19:00 +0000
ROA not after:            Mon 31 Aug 2026 14:19:00 +0000
asID:                     396605
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:4e:ab:ea:ce:b5:da:db:44:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:19:00 2026 GMT
            Not After : Aug 31 14:19:00 2026 GMT
        Subject: CN=a2898be5-a13f-4065-8486-73ad3b72b762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:e0:26:a0:8d:56:ca:62:9f:ab:2d:d6:06:
                    0e:56:49:94:86:e6:8c:25:bd:65:f6:58:e1:b5:b4:
                    48:f9:55:91:bb:03:5b:42:44:89:fb:52:73:9a:85:
                    a9:78:7e:45:fe:cc:cd:e4:50:30:da:7a:fe:20:10:
                    c9:a1:ec:2d:95:f1:de:42:02:17:25:5b:33:b6:81:
                    83:1c:11:ca:6a:a0:eb:05:43:a4:d7:af:8c:47:1a:
                    e1:24:ba:bc:3e:ed:34:22:55:4a:32:58:fa:05:6a:
                    5b:d3:e5:8d:15:b6:2a:4b:08:ff:cc:c1:80:a0:44:
                    ef:83:9c:47:58:45:19:73:95:0f:14:68:fe:d1:21:
                    1b:06:42:22:51:36:3a:41:63:ee:f2:78:00:c3:f8:
                    8a:b0:d5:20:e5:d1:48:f5:81:a4:11:a3:f6:cd:db:
                    b0:da:61:de:85:01:8c:82:8f:85:3a:c1:d4:bd:06:
                    7b:11:e1:35:25:dc:35:ee:07:33:1f:c9:78:b8:ea:
                    93:99:ba:02:d5:0b:a1:98:5d:9e:21:59:c5:81:99:
                    21:69:81:3e:ba:47:6d:43:ba:e3:5a:3a:e6:99:34:
                    40:ab:d6:49:4c:9a:5c:f8:47:c3:77:d2:f9:c6:02:
                    29:10:95:73:f6:13:2e:45:ec:67:0b:37:55:b7:0b:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:3D:BA:B4:AB:71:6C:AF:27:6A:57:FF:C2:CE:68:92:FA:A2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66f6183a-a71a-3e1a-9d98-af7f60e8a53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:3a:eb:f3:5e:bf:4a:29:8a:7d:1a:04:c8:42:ff:e3:4b:
         cd:57:6d:f3:ed:30:4f:94:ee:fe:cb:26:e5:b2:c6:02:d3:f0:
         9c:81:f2:bf:84:5d:d1:b1:eb:09:f7:1b:94:df:5e:e6:f5:8a:
         ae:d7:25:a3:01:2e:1b:9c:62:1a:46:04:eb:6f:ad:86:48:38:
         17:55:a1:71:dc:c6:10:3d:3c:3f:eb:fb:5e:9e:ce:82:41:7a:
         72:f4:98:ec:a5:32:dc:71:8f:5e:6a:d2:eb:bf:45:30:cf:0f:
         ee:d1:29:8c:86:31:8c:4b:ac:a4:b2:0d:d4:48:29:58:bd:c5:
         80:c3:c6:e3:66:ca:c9:15:4c:c8:f7:9b:ad:46:32:05:7a:99:
         db:04:88:f9:53:7b:6b:b0:90:ac:9b:85:c2:cc:25:ac:8a:e2:
         2b:50:6a:a8:3d:09:33:1e:8c:be:e5:c8:19:4a:bb:dc:a7:9f:
         02:2a:4d:2b:cb:86:f7:d6:1c:71:c8:04:32:02:66:e8:31:2b:
         2a:8b:02:ce:06:e6:d3:bd:13:8c:9d:c8:a4:25:43:c8:80:49:
         d5:17:a8:6c:16:6d:eb:b5:63:3b:c2:1b:32:56:f0:4c:df:50:
         0f:e8:45:be:e4:10:c0:46:97:c2:f2:a9:a5:69:3c:be:6e:04:
         01:fe:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:42:15 2026 by rpki-client