Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/942f065e-8bd6-3df1-8237-3611b17ab289.roa
File:                     942f065e-8bd6-3df1-8237-3611b17ab289.roa (raw, json)
Hash identifier:          MsUKOoJALbdA/SZSnbvgpKQAJecWcE1DB8cbS486u/s=
Subject key identifier:   F4:7A:A0:FE:F0:0B:31:38:DB:6C:4E:0D:D1:16:BE:64:3D:16:E3:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B139924EF40E5AE8CF130
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/942f065e-8bd6-3df1-8237-3611b17ab289.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     40647
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:13:99:24:ef:40:e5:ae:8c:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=534ad055-ab6c-4fa9-a797-00896e0689b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:50:52:2c:61:24:ac:bd:4b:b7:27:b4:5a:
                    de:9f:ca:9e:fa:de:e9:cf:9f:5f:d7:89:da:28:1b:
                    55:aa:1a:3a:d3:78:c6:59:9d:68:f5:25:be:9e:f1:
                    89:df:3c:c0:7e:08:d3:c3:26:e8:70:13:66:65:d7:
                    ea:30:ce:80:f9:06:de:8c:22:21:12:78:77:42:74:
                    68:77:47:99:f7:cc:13:1d:d7:b7:bc:06:f6:10:2f:
                    89:40:4b:5c:6d:f0:98:f4:59:50:a5:20:a7:2e:95:
                    39:54:c1:5b:7c:4f:a8:13:1c:f1:5c:93:26:40:63:
                    7f:a2:8a:64:3e:da:e2:1b:3f:78:46:ea:d5:c8:4e:
                    07:12:17:37:d4:01:d4:bd:d3:d7:db:05:dd:d8:c6:
                    66:ae:5c:d0:e4:c2:1e:ae:6e:0a:d3:26:f5:7e:a4:
                    dd:5a:9b:3a:f2:77:5b:0f:46:c4:8c:1d:1a:66:f3:
                    f6:1c:70:6a:21:f0:bc:f2:ef:27:32:22:04:3e:63:
                    48:46:5c:3e:e8:9d:4d:c0:89:45:5a:38:6b:49:dc:
                    65:26:0f:c7:45:44:01:fa:6a:29:d0:62:90:41:87:
                    21:8e:bc:e2:87:e4:38:b4:27:f8:12:09:5e:31:dc:
                    66:39:d1:a4:4c:2e:dc:c7:28:2c:58:ae:03:eb:c5:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:A0:FE:F0:0B:31:38:DB:6C:4E:0D:D1:16:BE:64:3D:16:E3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/942f065e-8bd6-3df1-8237-3611b17ab289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:07:b1:77:74:21:4a:ef:02:db:9b:6f:18:3f:bd:d8:be:
         be:77:32:3f:52:d2:59:d1:4f:38:a3:27:a5:f7:b0:5a:1c:40:
         ab:40:2c:9c:3b:fd:7a:f6:09:10:ae:57:74:b3:ea:7e:2c:f5:
         95:2c:d3:f1:55:14:13:79:e3:70:f7:d8:b0:07:e8:0e:0c:59:
         f0:f3:bc:17:c2:e0:86:88:61:86:4f:4e:00:aa:59:f5:70:3f:
         59:ca:d7:bb:6a:aa:47:d1:27:69:c1:07:de:04:92:ce:75:72:
         22:0f:c6:7a:35:73:a6:79:20:94:e9:8e:cd:94:9d:22:40:1c:
         89:d6:f0:2f:45:e1:b3:69:be:e0:6d:8a:48:c4:4f:c1:ef:d7:
         f7:1b:9d:53:e2:97:66:ab:b8:c8:b2:53:5f:46:2c:23:21:78:
         e1:09:90:e9:50:81:00:b3:6c:03:42:50:f8:e7:4b:f6:47:ba:
         11:6c:98:55:19:7c:2d:38:3a:98:0f:7b:89:4b:93:2e:09:21:
         ed:8a:4c:81:79:3d:c9:bc:0a:ee:ce:cc:c1:44:cc:53:51:e5:
         1b:56:72:47:60:61:b7:a0:32:2e:cb:99:45:71:54:b8:b2:68:
         91:5a:93:81:22:95:63:97:ba:71:5f:b3:17:0f:04:59:0a:c0:
         28:a4:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:00 2026 by rpki-client