Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/897905ee-194f-371a-b0be-337e8660f5c9.roa
File:                     897905ee-194f-371a-b0be-337e8660f5c9.roa (raw, json)
Hash identifier:          ahncXS65zEJivN7Yb8Dognwo7/Y2S9bMjOw4/0SQ9qs=
Subject key identifier:   56:E0:97:DA:AC:E2:4D:54:DA:FF:6D:59:73:BE:99:19:1C:20:9D:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1CC1887D141E6D55AE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/897905ee-194f-371a-b0be-337e8660f5c9.roa
Signing time:             Thu 14 May 2026 14:07:54 +0000
ROA not before:           Thu 14 May 2026 14:07:54 +0000
ROA not after:            Wed 12 Aug 2026 14:07:54 +0000
asID:                     36617
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:cc:18:87:d1:41:e6:d5:5a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:54 2026 GMT
            Not After : Aug 12 14:07:54 2026 GMT
        Subject: CN=f84e81fc-5f4e-44cb-8904-6f429f0629a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:fc:59:ae:37:a7:a7:b0:83:2b:57:20:2f:
                    c7:c4:b2:ec:78:55:bd:51:25:8d:07:12:a4:68:cf:
                    b0:d9:98:09:f9:16:53:8a:25:be:eb:7e:35:0c:5b:
                    64:83:47:1d:5f:01:a1:4c:69:8c:ad:2d:26:d4:30:
                    4c:d1:88:ac:09:e8:39:bc:2d:96:ea:5d:ec:5c:f5:
                    9a:73:c4:24:60:a2:e0:57:6d:f8:4c:c5:e0:79:a4:
                    06:1e:b0:91:ec:37:bc:f1:1b:5b:f3:e8:8a:4d:74:
                    32:78:2a:73:d7:1c:9d:74:7d:81:01:d6:23:ef:df:
                    e0:ad:d0:6f:51:54:4f:07:76:46:03:2f:38:a1:8f:
                    7b:d1:20:1a:ea:65:ab:fd:55:f8:5d:30:55:34:d1:
                    c4:4d:96:fb:ca:6d:32:5e:46:98:f7:37:b9:83:2e:
                    2b:c1:5d:97:2d:57:1a:b1:bf:87:52:11:72:eb:53:
                    7b:12:4f:52:df:f0:aa:ee:3d:a9:b7:22:6b:76:b3:
                    f0:77:0c:d4:3a:5c:99:92:f8:b3:4e:d6:64:cf:0c:
                    24:08:49:5b:ae:7b:71:c5:01:0d:c0:4e:a1:4d:6e:
                    eb:d0:f9:fe:df:03:bc:69:8a:ee:ae:9f:5f:9e:bd:
                    46:b2:cf:13:18:00:b4:75:ed:6c:39:ac:b1:db:ce:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:97:DA:AC:E2:4D:54:DA:FF:6D:59:73:BE:99:19:1C:20:9D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/897905ee-194f-371a-b0be-337e8660f5c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:e6:ff:0d:36:5d:f0:f1:5d:95:f5:ee:8a:56:ff:6b:58:
         89:25:3d:5c:8d:65:41:ec:77:6b:43:ac:b6:60:f6:55:27:fb:
         6f:1d:98:5b:8e:e3:2b:a8:33:58:7b:60:f3:f5:c6:94:3a:31:
         26:c1:31:a7:b0:7c:0f:b5:52:97:47:94:c5:97:74:46:2e:19:
         67:92:df:77:fb:fa:cd:32:a2:3c:95:e0:54:3d:2c:16:40:ff:
         56:5e:60:df:4a:47:0d:02:f2:82:c9:7b:87:c6:f9:c6:1c:ff:
         0d:4e:df:9e:ac:63:d2:8e:be:90:73:20:61:e4:7b:8c:14:47:
         46:5f:f2:cc:71:a9:00:84:a2:a8:29:f4:0c:43:83:e5:26:12:
         92:66:90:17:18:74:c4:dd:e5:23:b7:fb:c6:e0:ea:37:5e:6c:
         2b:7a:e6:dc:44:27:4b:2b:a3:4a:ea:63:22:4f:47:e6:b4:6e:
         b0:45:f0:87:66:fa:e8:49:fd:85:ec:9f:f1:b5:b6:82:45:ff:
         18:68:80:62:17:d9:39:08:75:04:11:b5:1e:db:9f:d5:56:01:
         95:b8:bb:f2:85:53:d3:2b:6c:a7:80:d8:4a:ab:0b:ce:32:d3:
         07:3a:9a:ca:10:0e:cd:56:e1:c8:9d:98:39:e1:f6:24:c8:bc:
         7c:96:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:49 2026 by rpki-client