Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
File:                     9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json)
Hash identifier:          A2IbE5It7jaUEQ7Yt/U/L5u+CjTeNbwEL3ybH60EkNg=
Subject key identifier:   DE:7C:7B:53:FC:65:61:B6:54:36:2F:49:1D:54:2F:C6:C7:76:5A:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDBBB19C4B09D1A5DFDEEBCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     396611
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:19:c4:b0:9d:1a:5d:fd:ee:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=d2af06cb-c85d-4dc1-8ee6-89881bb156dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:a1:be:6a:e1:4f:e8:0e:ec:03:f2:98:ba:
                    cd:02:91:45:47:a8:64:06:4b:d8:fa:0a:a4:e8:69:
                    81:b3:53:91:54:3a:95:27:18:24:38:ae:9b:44:0f:
                    c3:1f:f8:ff:90:7a:3f:17:94:62:13:85:ac:1f:61:
                    e5:f7:d2:5c:ca:89:f3:59:81:42:a2:cb:6e:52:44:
                    72:54:91:41:c1:bd:ba:21:ac:72:13:26:d4:f7:3d:
                    82:bd:5b:01:67:12:82:de:db:82:70:4d:be:15:ec:
                    61:88:9b:6d:26:28:7b:7a:70:33:8c:b9:ce:69:39:
                    77:41:02:7a:a5:05:d3:4f:e8:90:4a:34:8b:45:a7:
                    54:ce:fe:4a:d6:9d:68:52:67:6a:c8:ea:6c:be:57:
                    b5:95:a9:32:8f:3c:4b:91:df:41:0e:10:73:9e:35:
                    65:f3:b8:78:ac:94:1a:ad:1b:f5:d4:99:95:4f:50:
                    8b:3a:d4:d6:5d:54:a9:b3:4b:38:05:04:91:97:4e:
                    08:0d:a9:a5:3d:62:64:66:f5:52:32:26:57:4e:b7:
                    f8:7f:06:3e:91:02:a2:17:74:39:fc:06:74:b2:be:
                    78:31:62:ad:21:34:97:11:f8:87:6e:97:0e:71:25:
                    11:be:64:8d:a3:09:37:64:fe:c4:5c:d6:0f:3b:a6:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:7B:53:FC:65:61:B6:54:36:2F:49:1D:54:2F:C6:C7:76:5A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:25:b5:b4:e7:b1:06:16:b0:ae:87:6e:fe:1f:ff:06:ac:7d:
         7e:6f:38:2b:5a:27:92:f0:84:b9:08:ef:6f:6a:b1:67:e3:c9:
         c0:0b:9c:08:09:db:eb:a9:9a:43:d0:49:ba:43:3f:2d:34:65:
         93:53:d1:2b:6c:b2:d2:00:71:ce:8f:60:29:4a:3d:42:69:cb:
         b7:98:16:17:17:c7:e7:2b:58:46:a4:fa:29:02:39:29:5f:ea:
         ee:21:ce:3d:68:f9:37:82:bc:5c:5b:68:13:24:da:d8:b7:e5:
         49:9a:2c:3e:8a:b8:ce:c2:c6:6b:77:35:93:22:cd:9b:10:e8:
         2f:62:be:8e:da:86:b7:fe:2e:de:25:7e:06:00:e3:43:e3:a2:
         f1:c7:6f:79:8a:3a:3d:83:8a:3a:a8:e5:d1:2a:e0:59:7a:99:
         ec:21:93:54:3f:69:51:f9:19:a9:94:a2:a8:d0:3b:bd:d7:37:
         ac:d0:a8:3a:e6:c8:c2:33:4e:5d:bd:48:32:c4:cd:08:e9:9f:
         00:81:ec:aa:1d:0e:de:3f:89:45:1e:4c:08:80:36:c7:7c:3f:
         8e:9d:5f:89:fd:e6:b1:b3:13:ac:07:44:aa:48:a1:ce:70:eb:
         a4:a0:48:c7:24:51:96:bb:6e:37:72:c1:7c:1e:0f:9f:21:8c:
         dd:73:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:41 2026 by rpki-client