Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/950094c1-1c39-395e-9db9-c3dc3ec457f4.roa
File:                     950094c1-1c39-395e-9db9-c3dc3ec457f4.roa (raw, json)
Hash identifier:          kkNArWKAXpLbvqLsRWk8S5Q0eTJ6WDnZbEDNsEhaYMg=
Subject key identifier:   1C:7F:64:32:E2:14:29:B3:11:3C:D0:5C:D0:79:52:8E:B4:F2:29:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C6C3BA742CD41163C1180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/950094c1-1c39-395e-9db9-c3dc3ec457f4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396596
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6c:3b:a7:42:cd:41:16:3c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3e1e2848-808c-4061-9691-76533ebd98c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:a8:6d:95:73:14:30:66:c7:3f:ff:2d:b7:
                    2d:dd:8e:4a:32:57:a0:8d:09:29:02:79:c2:b5:b1:
                    5c:62:20:8d:b4:48:56:a3:e3:da:c6:fb:00:6a:60:
                    03:48:fd:27:69:7c:7f:6d:e6:b8:55:a4:eb:c7:bc:
                    31:06:f6:54:17:84:ca:d7:82:76:93:93:a6:a3:ed:
                    e2:f5:05:77:4a:68:f9:f9:7c:9d:72:a4:63:82:e2:
                    ae:8b:0e:52:44:91:7a:68:e9:be:9d:3d:db:22:99:
                    bb:a7:f2:cb:9a:8d:51:7e:53:05:2d:5f:e4:54:97:
                    93:77:16:eb:50:60:51:df:f5:22:37:14:5e:68:d0:
                    8f:cd:6f:19:e9:6c:52:d3:76:0c:b3:33:39:64:97:
                    36:ca:e2:99:68:d8:09:89:f2:48:1e:cb:b6:4f:ec:
                    76:19:54:70:05:ca:85:b7:1c:89:f7:f7:cc:b8:be:
                    58:1c:f0:96:f9:69:82:9f:49:64:f5:1e:24:1a:39:
                    25:6f:27:7c:28:20:ca:bf:07:83:67:58:a2:e0:d0:
                    eb:76:4e:26:fb:da:75:13:d7:23:51:8e:f5:33:27:
                    7b:54:31:0d:d5:dc:ae:df:42:d3:50:84:93:7d:17:
                    6a:a2:d2:23:b7:52:c3:b1:af:53:d5:2a:ef:fa:a7:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7F:64:32:E2:14:29:B3:11:3C:D0:5C:D0:79:52:8E:B4:F2:29:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/950094c1-1c39-395e-9db9-c3dc3ec457f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:09:38:4b:68:6b:32:ad:8b:63:5d:14:cc:f2:50:28:a2:6a:
         a7:5b:bc:5b:53:0d:bd:66:98:b1:9d:54:ca:85:3c:7e:66:eb:
         ca:dc:81:20:35:26:e2:93:12:32:92:15:74:4f:42:01:5f:9c:
         e3:02:42:57:5f:a9:c0:4b:ac:12:d2:75:f3:1e:dc:a6:26:0b:
         87:ed:79:9b:f8:16:52:81:dc:3f:0e:3c:5a:d1:86:aa:ab:30:
         39:87:6c:b3:33:fb:d2:7b:30:31:30:cd:05:2b:a9:2e:95:8b:
         d5:43:b1:78:05:5a:ee:9c:6e:31:aa:87:eb:47:ab:bf:f7:a0:
         a3:8c:5c:f6:bd:00:fe:db:0d:a4:5d:5b:30:38:4b:a7:b7:82:
         a7:15:73:6a:13:a4:cc:a3:93:ab:2a:af:24:80:81:92:52:bf:
         b6:48:22:2a:2c:ef:5c:5a:f6:b7:bb:83:c4:88:a7:19:69:b0:
         c0:1d:97:5d:43:0c:73:08:48:8f:5c:f3:af:66:32:4c:bd:7c:
         ca:ba:34:90:0e:fc:f5:20:07:0c:2a:98:07:32:55:d3:92:cc:
         e2:80:9d:5d:50:a1:d9:f1:32:3a:ce:41:5b:18:10:97:d2:3c:
         59:ca:68:fc:0b:8e:cb:28:47:8f:1d:e0:6d:85:63:7a:5a:93:
         2e:e0:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:27 2026 by rpki-client