Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9370c306-e9a4-3587-b8d1-a3a5280f3790.roa
File:                     9370c306-e9a4-3587-b8d1-a3a5280f3790.roa (raw, json)
Hash identifier:          Tmi75fMv6RZBxgMsKNovQYJQ4OUk7ubsQMH5ce2t4kM=
Subject key identifier:   BA:49:1E:92:A0:20:91:93:07:1B:E0:B4:FD:FF:72:44:CE:53:B6:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B82A881A9165EB5CDE040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9370c306-e9a4-3587-b8d1-a3a5280f3790.roa
Signing time:             Thu 04 Jun 2026 14:26:44 +0000
ROA not before:           Thu 04 Jun 2026 14:26:44 +0000
ROA not after:            Wed 02 Sep 2026 14:26:44 +0000
asID:                     396606
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:82:a8:81:a9:16:5e:b5:cd:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:44 2026 GMT
            Not After : Sep  2 14:26:44 2026 GMT
        Subject: CN=9025c695-d5cd-4f05-a31d-9ac27c825511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:5b:87:ee:38:25:7a:fc:04:97:f7:9e:bc:
                    53:7c:94:64:ee:44:95:a6:de:7f:f0:f3:ca:c2:40:
                    66:40:d5:8a:6c:6d:a6:df:ec:86:a3:f8:58:c4:49:
                    58:c3:c2:df:90:86:c1:63:2f:75:18:86:3a:b0:a7:
                    ed:a7:7e:f4:b5:f1:c8:10:b5:b4:bf:a6:eb:2e:df:
                    fc:1f:94:9b:94:fc:84:32:5d:cd:46:39:cb:19:52:
                    95:17:f8:11:0c:30:98:45:16:2d:d3:82:3b:04:37:
                    df:f8:e8:0c:f3:a4:66:0d:b3:cd:dc:2e:5e:26:68:
                    0d:79:96:f6:9e:e1:2c:01:a6:5d:73:81:8c:ab:72:
                    d5:0c:ce:0b:8a:59:5b:37:1b:9e:cc:0a:3c:4e:c9:
                    bc:87:26:00:83:de:60:64:b5:8a:58:29:97:7e:a9:
                    95:72:9e:55:22:28:3b:4c:96:83:35:15:79:d0:fb:
                    70:fc:3d:e0:ba:4d:cf:49:20:9b:47:d2:87:bd:e3:
                    79:28:0d:42:5c:26:93:dd:bb:2d:d5:6d:2d:52:ea:
                    7a:53:93:9a:57:b2:5f:ec:b7:43:96:b3:e6:21:99:
                    ca:72:70:b8:64:d1:e1:32:cc:5e:06:0c:90:af:ee:
                    00:6d:e4:a7:50:b2:d4:7f:de:f3:bd:68:46:cd:7e:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:1E:92:A0:20:91:93:07:1B:E0:B4:FD:FF:72:44:CE:53:B6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9370c306-e9a4-3587-b8d1-a3a5280f3790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:91:d0:f0:d5:74:f0:6e:6e:0b:16:b4:2c:f1:33:12:e3:
         d9:1c:25:96:fb:d2:99:c2:99:0d:85:10:93:5c:f0:39:ea:99:
         a7:da:b7:79:6e:2d:7c:51:24:0a:2d:26:e4:53:8c:c7:6f:b4:
         a9:4d:41:fe:a2:ea:97:1f:2a:e6:a6:2c:49:7f:e6:ea:4a:6a:
         04:fe:1e:4d:1c:b2:41:c8:07:8c:fe:5f:5d:0a:3f:fe:5b:35:
         2b:a2:13:1d:be:bd:c0:86:d0:b3:cd:99:78:5b:b0:77:22:24:
         23:cf:d4:a1:a6:17:d6:7a:f7:39:e3:f6:3e:a8:0a:ee:98:c3:
         7c:b0:a9:5a:0b:0b:02:d5:50:27:7f:7e:a5:25:4b:06:16:a0:
         a8:7c:35:7e:4c:71:2d:14:de:22:b8:98:b0:cd:9d:f5:f2:5e:
         cf:ac:6b:11:ab:2d:86:53:8f:03:b3:95:ac:cb:6d:e8:c6:42:
         26:74:31:27:4e:70:ac:b7:53:4a:5a:a9:e1:a2:07:80:fe:2b:
         20:36:86:c7:d0:e0:9c:65:b3:eb:a9:31:5b:c5:f0:ea:d5:5c:
         89:1b:a8:95:5c:3f:e1:73:d7:93:7a:b5:0d:2b:bb:79:6c:3a:
         7e:e6:f5:7e:53:7e:b1:f8:a7:54:7c:83:62:7f:d3:be:f2:1c:
         c0:29:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:15 2026 by rpki-client