Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b944c429-9369-34e4-b71a-dcd15430e0a3.roa
File:                     b944c429-9369-34e4-b71a-dcd15430e0a3.roa (raw, json)
Hash identifier:          yq5y1FimdmcM0ynsdC5b2TCZW/cFr2nGKGyUMfWMYQQ=
Subject key identifier:   31:43:5D:4D:91:2E:0A:17:42:15:11:7B:90:F8:89:66:1F:9F:38:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7E79CE9995406465C5D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b944c429-9369-34e4-b71a-dcd15430e0a3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396581
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7e:79:ce:99:95:40:64:65:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8cf63d6e-ab9e-4c2e-b702-5f370cf78f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:81:29:93:90:fe:b9:50:28:e1:32:ef:29:
                    f9:a4:ac:8c:c6:3e:c4:0f:24:02:ff:2a:74:95:35:
                    74:ed:21:1b:ab:93:e1:38:9b:6c:b4:fe:0f:2e:d2:
                    41:d2:51:c0:49:a8:93:ae:1c:12:4f:d6:06:d1:fb:
                    63:c1:49:ae:3e:2f:7f:cb:3f:33:dd:31:c6:62:0f:
                    f2:ea:87:aa:0f:36:57:11:ca:bf:5e:e6:d8:7c:ef:
                    16:24:ff:89:4b:8c:3c:a5:29:10:d6:a0:cf:f7:cf:
                    46:37:6c:e0:4a:f6:23:46:2c:bb:4a:9d:04:4f:3d:
                    40:93:ce:78:39:71:ac:40:55:0d:0c:b3:6e:85:87:
                    35:4f:58:53:08:cb:35:fa:ad:e4:55:8c:eb:7e:74:
                    25:00:9a:2b:f5:67:fd:52:47:ca:29:91:80:5a:ad:
                    53:8e:3f:e6:26:c2:fd:28:3b:7a:c4:74:90:4d:ae:
                    b3:9d:26:3a:5e:d5:ac:ca:5c:34:82:37:22:32:2b:
                    87:9b:91:33:dd:55:d8:0f:a1:a2:3e:98:50:29:64:
                    b7:b1:ba:61:58:e6:43:33:ed:8c:e9:73:d3:5a:1b:
                    d7:5f:3a:fd:2f:6d:49:68:af:a3:56:24:dd:99:ad:
                    da:63:08:8a:39:6e:7e:fb:7b:1e:f3:42:b2:39:86:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:43:5D:4D:91:2E:0A:17:42:15:11:7B:90:F8:89:66:1F:9F:38:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b944c429-9369-34e4-b71a-dcd15430e0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:85:89:e3:6f:00:2e:7b:9f:10:25:6a:ff:3e:c6:65:7c:da:
         6f:44:24:48:ad:2b:0c:3d:55:b9:93:23:38:bf:33:31:a1:2a:
         bc:d7:d5:e1:85:60:51:44:4c:55:a1:43:35:bd:89:d8:f6:5a:
         6a:0f:e7:39:47:93:b8:a6:e5:f2:26:da:4d:49:ae:fc:e3:0d:
         a2:d4:b8:4b:da:b3:cb:d2:86:74:1c:4e:61:32:c0:1a:85:13:
         bb:57:53:b9:1b:11:8d:ca:75:78:aa:10:35:33:db:e5:a4:9e:
         d2:1c:87:5d:c8:94:58:f0:f7:ce:f5:e8:64:01:98:85:1f:bb:
         ac:1a:76:e1:83:ae:f1:a6:26:ea:7c:ab:33:68:d2:1c:2e:ee:
         f1:da:f9:0e:f7:78:69:7c:26:60:8a:8d:19:b6:f8:0f:4d:4c:
         76:ec:1f:3f:b4:ed:42:9a:fc:05:06:18:f1:35:21:b1:75:45:
         4d:30:9b:09:2a:34:ac:82:76:7d:0f:a1:d5:12:5a:83:31:3a:
         0b:e7:75:0a:ce:ad:45:02:43:fc:84:65:76:dc:85:5e:70:aa:
         9f:ef:3c:c4:57:d9:bb:74:6a:78:68:29:fb:4e:22:35:29:9f:
         2b:39:4c:6a:95:cb:81:60:8a:b5:9f:99:c2:b8:98:65:30:71:
         27:68:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:55 2026 by rpki-client