Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdbf3d40-7d1f-3f50-8194-d5c457c3e8db.roa
File:                     cdbf3d40-7d1f-3f50-8194-d5c457c3e8db.roa (raw, json)
Hash identifier:          djn3A/fbxBHNxmGkuVNMZLp8g8PsXmTWQUGzvPuP6HI=
Subject key identifier:   07:B2:EC:F1:9A:DE:51:EF:D3:DA:3D:F1:D5:CC:7E:C6:A7:1A:86:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB97B46E86895BDDA556C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdbf3d40-7d1f-3f50-8194-d5c457c3e8db.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396546
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:97:b4:6e:86:89:5b:dd:a5:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=5eceeb22-ebfe-4628-bc01-067dee4a45d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:9a:6f:03:8e:46:72:98:7c:41:e7:83:20:
                    b0:e2:6d:fb:39:e2:8f:1f:8a:b7:7f:ec:31:86:02:
                    ae:66:13:a4:44:ca:76:4c:77:e1:e8:fc:5b:68:5a:
                    a2:e5:1b:c4:cc:ca:e6:c7:01:e5:6d:c5:e6:68:32:
                    cd:8e:56:eb:24:d2:32:89:3e:80:c9:1c:f3:41:ed:
                    09:39:88:97:1f:ed:f9:a3:2a:e4:b8:89:31:78:23:
                    97:ba:b7:94:fc:ee:dc:e0:d5:23:e8:27:3e:e6:83:
                    8d:7c:26:1a:c4:44:90:29:ab:4e:4f:8b:05:e7:31:
                    42:b6:7e:86:1c:76:97:83:2b:88:88:82:70:ac:68:
                    f5:82:96:61:1b:04:a6:f0:f6:e4:f4:8a:fa:a6:d9:
                    9c:db:68:f0:e0:e7:c3:9e:72:f4:96:76:13:28:92:
                    41:01:cf:bc:8d:77:d5:b3:aa:c9:e8:d1:47:23:ae:
                    68:73:7f:f3:a8:05:98:b4:ef:0c:2d:1b:70:41:91:
                    4b:bf:5c:13:6d:d1:91:58:a1:88:09:c3:ec:0d:7e:
                    b0:71:bb:4a:9d:ec:65:ce:b2:8a:e7:20:5f:cd:f2:
                    33:fe:56:6e:9e:7b:60:d4:44:0d:61:df:2b:fa:20:
                    97:8d:eb:5c:82:8d:a2:c0:e1:13:01:37:7d:ee:97:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:EC:F1:9A:DE:51:EF:D3:DA:3D:F1:D5:CC:7E:C6:A7:1A:86:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdbf3d40-7d1f-3f50-8194-d5c457c3e8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:02:72:80:cf:bc:d5:4c:74:2a:9f:39:bb:fb:28:7a:bb:22:
         30:5c:51:73:34:80:9c:14:d7:4d:d0:bf:d6:c1:75:a3:42:71:
         eb:bf:62:dc:0c:27:aa:a9:88:47:e1:8d:9b:01:be:ea:c1:17:
         53:74:76:29:47:ff:8f:71:46:da:b4:99:00:61:e8:cb:de:58:
         77:51:a0:68:35:1b:9d:39:4c:f4:d5:e7:7d:51:06:30:ef:8d:
         3a:c4:c8:3d:83:a5:4d:20:ca:33:09:06:b2:9a:9f:c4:0c:7f:
         d4:a0:36:18:af:fc:eb:d3:4e:f9:79:c5:51:0d:6e:dd:e3:88:
         f9:78:9c:b0:4d:e4:5e:92:bf:83:b5:df:57:73:bb:6a:af:d5:
         0c:32:68:e9:fe:33:42:8c:e4:19:48:17:04:80:7a:f1:15:ef:
         ca:c8:d6:ff:49:0b:a4:cb:44:3f:f7:42:6d:c2:1c:90:58:61:
         9b:96:87:9f:50:ab:f4:d4:aa:7d:cb:05:d7:8f:02:39:a6:30:
         b4:b4:b4:9e:28:f0:c4:04:17:41:3e:93:8f:94:02:76:60:a2:
         4f:92:0a:78:30:e2:fd:e9:96:12:d2:80:ad:64:ac:9b:a0:0f:
         a2:32:53:96:95:f3:8f:65:99:5e:c8:fd:29:8f:c7:9d:9d:88:
         78:8c:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:10:41 2026 by rpki-client