Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3dcc3a-68a3-31ef-9602-cc687fe00b60.roa
File:                     aa3dcc3a-68a3-31ef-9602-cc687fe00b60.roa (raw, json)
Hash identifier:          LPXDy0+jXwdCAPRqthHhM1zdhRSuWuUXGLcbq2nACNU=
Subject key identifier:   FA:00:E3:2F:EF:FF:52:51:D3:C0:16:E4:41:DD:FF:DB:92:97:48:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B82F46CBF551EE93A9480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3dcc3a-68a3-31ef-9602-cc687fe00b60.roa
Signing time:             Thu 04 Jun 2026 14:26:44 +0000
ROA not before:           Thu 04 Jun 2026 14:26:44 +0000
ROA not after:            Wed 02 Sep 2026 14:26:44 +0000
asID:                     36616
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:82:f4:6c:bf:55:1e:e9:3a:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:44 2026 GMT
            Not After : Sep  2 14:26:44 2026 GMT
        Subject: CN=e7090aae-10aa-4395-89cc-c1995f3f9a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:9f:e9:54:b4:aa:4c:96:d1:5c:2e:13:98:
                    a1:77:49:32:ec:4f:0f:81:ed:7e:18:a3:60:44:88:
                    d7:5b:14:7d:1d:47:da:ce:bc:c8:be:9f:b3:8a:b6:
                    da:82:18:1c:75:95:23:1f:58:1e:b1:d8:5d:01:c5:
                    b7:99:99:cb:e8:eb:c7:75:16:28:dd:60:e6:2c:12:
                    cf:9a:7b:51:3c:32:6a:6e:95:18:32:c0:4e:61:24:
                    ad:34:24:77:29:cd:53:82:9e:29:28:8f:15:ca:5e:
                    42:5a:b3:d6:b7:b7:e6:53:aa:00:2d:35:cb:28:7e:
                    52:77:4c:4b:22:26:f2:5b:37:a8:92:60:c0:3f:6c:
                    45:ef:00:74:22:db:2a:e4:ad:25:05:a6:9c:f9:b8:
                    82:04:e0:0e:1d:15:ea:6e:e3:0e:4a:3a:57:4b:9c:
                    01:0f:2d:c2:07:9c:5d:27:48:2e:85:a6:d1:93:9e:
                    89:9a:0a:14:5d:10:8e:73:99:9f:4e:7b:08:75:d7:
                    19:e6:7c:af:aa:0a:8c:f7:05:e8:b6:5a:2e:9e:06:
                    13:19:4a:55:cc:0b:3f:a2:c0:fa:17:22:08:a1:c8:
                    cd:39:13:c5:cf:5d:5c:62:43:50:c4:e4:40:b6:aa:
                    4d:ef:5e:82:17:12:0f:e8:d3:e6:a6:63:08:cc:a0:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:E3:2F:EF:FF:52:51:D3:C0:16:E4:41:DD:FF:DB:92:97:48:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3dcc3a-68a3-31ef-9602-cc687fe00b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:ec:44:d8:23:09:58:59:4a:fb:1b:75:34:5a:b2:c4:39:
         23:be:69:d8:eb:71:29:cf:69:05:04:5e:12:80:3c:bf:d8:d4:
         1d:4a:02:26:3c:c6:06:b6:cc:90:c1:e4:4a:be:c5:b1:c2:e0:
         da:e5:26:6b:4b:d4:eb:4a:d8:03:fd:73:80:5e:7a:c7:27:8a:
         c8:fb:4a:aa:4f:2f:8a:60:32:02:f4:bb:7e:02:22:cd:2e:ac:
         3a:4f:cc:36:2f:4b:c8:36:05:02:3f:65:99:03:05:63:e8:80:
         46:54:a1:cf:19:5a:9e:8b:6a:22:99:dc:e8:bc:10:8b:66:f0:
         2d:78:a6:92:db:f1:c7:a2:7a:26:1b:3d:c1:71:a2:8f:2a:9d:
         69:e6:82:3c:ed:7b:f1:86:a3:30:15:ba:44:45:92:c3:4a:b3:
         c8:7b:00:6f:44:27:66:6a:4a:b8:e3:b1:ce:fd:68:cf:d1:27:
         94:be:2d:8c:46:e8:a3:b2:eb:99:6c:a4:89:2d:db:ca:6e:49:
         42:0d:f1:8d:2a:a5:9a:d7:ac:3c:69:61:3c:4a:06:93:74:6a:
         d6:c5:1c:5a:aa:44:7d:75:7b:ca:66:de:f0:dd:ed:f9:0c:0b:
         b5:60:41:0c:76:16:f8:e6:58:68:29:ea:e3:d4:83:ac:58:fc:
         8c:95:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:55 2026 by rpki-client