Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
File:                     97689e81-de50-349b-9e06-604ef847971c.roa (raw, json)
Hash identifier:          Je7mG0imaHi1fWU/WbuRSnWXrx9GHsgaJd1Xdlqome0=
Subject key identifier:   F3:3C:37:A5:3A:A7:A0:D1:7D:1B:7C:F7:78:D3:BA:1E:90:C5:6F:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87F7264889EA610759F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     40647
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:f7:26:48:89:ea:61:07:59:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5b24476a-626f-47a6-8029-77a797713488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:d6:82:14:bf:a4:6e:6f:4c:8a:67:4f:57:
                    bb:c1:92:c3:b8:71:58:80:b4:93:2a:c5:cd:df:c0:
                    52:16:72:78:6e:59:d7:dd:b1:65:2c:f7:cb:b8:32:
                    82:c7:44:37:6d:4d:d2:01:fe:2d:35:04:01:82:51:
                    ba:7a:c3:0a:ae:ec:10:b3:f6:8f:72:77:3e:94:7a:
                    4c:53:4a:66:60:11:f3:2b:e5:f6:73:c1:44:5d:71:
                    9e:71:77:76:ce:58:e3:cc:97:98:93:ac:51:6c:d6:
                    b8:c0:15:d4:11:df:ee:c9:2e:5b:a6:13:00:8a:0b:
                    b5:cb:13:63:8d:d1:9b:84:61:2e:b2:03:3b:34:08:
                    f4:11:c9:a0:61:59:21:7b:89:9f:08:bf:88:e8:0c:
                    6d:5a:5a:24:32:61:fa:01:d1:4c:05:7b:25:9e:4a:
                    97:b1:8d:13:02:4f:87:d4:44:40:95:25:0f:69:71:
                    37:78:7d:b3:d2:08:97:4c:cf:ad:1f:23:cf:50:12:
                    b2:96:4b:71:1e:81:bc:da:5c:f4:a7:83:35:f4:f5:
                    8e:2d:b0:8b:81:a0:34:0d:6c:84:ae:74:c5:62:bd:
                    97:46:9f:ca:ee:ef:13:2e:07:02:10:12:09:31:29:
                    7b:58:9a:a5:d3:f6:11:9d:bd:cb:27:5a:6d:cb:64:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:37:A5:3A:A7:A0:D1:7D:1B:7C:F7:78:D3:BA:1E:90:C5:6F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:6a:80:14:fe:52:21:85:47:cc:3e:6d:c5:a3:8d:a1:98:
         e0:70:5f:14:36:d8:f0:c2:e1:42:dd:4c:33:0f:20:b9:bd:90:
         5e:73:26:93:0a:8d:0a:cc:d8:71:b6:dd:36:6a:2c:a0:4b:df:
         b7:f5:cb:87:a7:1e:b0:0d:d5:8b:fc:48:7a:bd:df:9c:b5:89:
         eb:3c:b8:7d:75:45:b6:88:46:a5:77:18:fe:aa:13:b0:2c:94:
         d2:be:ea:69:6f:6b:35:d5:3b:68:65:2d:05:d0:64:06:21:76:
         bd:e5:0f:8a:a2:c3:44:0b:f8:dc:96:3b:68:61:81:64:23:0f:
         3c:25:40:44:e2:f5:6b:37:63:dc:7d:16:6b:c0:05:ff:7e:d2:
         d6:47:66:c6:bb:91:4d:c8:04:de:8b:db:0b:3c:fb:f0:a0:fc:
         77:88:2f:01:93:6c:2a:06:24:20:47:15:04:03:e4:79:04:2d:
         8b:65:91:5b:64:c7:3a:d0:53:53:cc:3e:98:a2:79:49:8c:6b:
         e2:4d:bd:58:3d:e7:7a:65:f6:c7:7e:e2:d4:6f:ff:c8:30:e7:
         58:1f:fa:8e:c1:e0:56:69:08:27:6c:46:44:35:8f:90:1e:8e:
         b5:82:16:88:a9:98:83:86:e7:d3:b0:3d:cf:3f:59:b6:8a:01:
         29:c2:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:21 2026 by rpki-client