Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cebb5934-4df9-3c51-91de-c714e8100a9e.roa
File:                     cebb5934-4df9-3c51-91de-c714e8100a9e.roa (raw, json)
Hash identifier:          TJj3AppzSeVL22uXrFE8y+4zpJX+98A6MgADCWT7F7E=
Subject key identifier:   A8:98:90:AB:A3:E4:B3:FB:91:49:B8:2C:68:F8:28:3E:52:ED:DE:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D3AEE5171BE2D8967980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cebb5934-4df9-3c51-91de-c714e8100a9e.roa
Signing time:             Thu 14 May 2026 14:07:57 +0000
ROA not before:           Thu 14 May 2026 14:07:57 +0000
ROA not after:            Wed 12 Aug 2026 14:07:57 +0000
asID:                     396591
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d3:ae:e5:17:1b:e2:d8:96:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:57 2026 GMT
            Not After : Aug 12 14:07:57 2026 GMT
        Subject: CN=3c018ee5-e4df-4637-804b-2930e33baf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:9f:13:02:5e:db:36:cf:e4:bc:ee:59:0c:
                    4f:12:b3:f7:94:e5:9a:20:49:ed:9b:63:ef:ab:56:
                    cf:84:91:a7:41:e7:5f:8c:ec:07:d1:fc:a8:3e:b1:
                    45:ff:63:7d:e6:79:dd:75:5e:60:30:6d:8f:7d:a7:
                    0d:b7:27:bd:79:92:38:b9:f1:d5:81:4b:1d:30:5c:
                    f6:2e:23:5f:5a:23:07:a1:d3:30:66:06:62:1f:e9:
                    8d:6d:5a:2f:97:1d:a6:9e:d3:a6:99:10:a0:cf:f0:
                    98:64:d2:6d:55:2e:9b:49:7b:76:fe:c8:7f:13:63:
                    91:30:a9:03:be:51:8f:4e:d2:bb:95:81:22:f9:ce:
                    ec:13:ec:7f:4e:44:d8:94:bf:01:88:f8:db:db:e8:
                    62:03:ff:9f:be:16:0a:ff:83:0b:55:ef:e9:c3:0f:
                    4f:1a:c8:c7:c8:27:d2:cb:c4:31:d3:74:8c:f6:5b:
                    8e:b2:6a:fc:c8:68:c8:26:ea:5a:f9:dc:60:17:75:
                    8e:ca:81:87:30:f4:73:15:01:4a:f9:bc:ea:60:d1:
                    c9:3e:8d:12:83:f3:a7:96:de:70:5a:97:51:fc:df:
                    96:cf:d5:a2:4c:10:27:ef:a0:2f:9d:af:44:b8:f9:
                    1c:cd:19:d1:e9:53:17:d6:3c:3a:89:c5:f9:cb:12:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:90:AB:A3:E4:B3:FB:91:49:B8:2C:68:F8:28:3E:52:ED:DE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cebb5934-4df9-3c51-91de-c714e8100a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:6c:dd:9f:4f:93:a2:bc:88:11:e9:b5:31:2a:1a:f5:d4:
         18:b7:ec:1f:dc:ff:e0:36:cc:ca:2b:6a:31:c4:8b:87:0e:4b:
         34:af:de:17:41:cb:74:70:cc:a2:35:a1:2a:cd:f6:05:72:25:
         b5:f2:eb:a3:20:49:9d:3f:67:b0:e7:c8:99:a1:9a:43:b5:34:
         38:9a:9e:db:12:15:29:62:58:e1:6c:45:aa:73:24:0b:b5:57:
         2d:c4:63:b7:5f:f1:4e:82:8a:03:5e:66:1f:0d:7f:b5:47:ea:
         71:48:7d:cc:f7:f2:34:c0:f9:60:ee:c7:38:a8:ef:da:ad:d6:
         09:f9:8e:ab:c7:21:af:c5:70:f3:13:9d:5d:0c:fe:7d:62:cf:
         c5:e5:8d:4f:5d:1d:02:ea:55:5f:78:e5:df:03:29:16:85:51:
         33:90:74:0b:43:10:a9:44:16:38:4c:9f:36:90:aa:a1:e8:b8:
         5b:b1:3f:d7:49:2e:e4:1c:96:3f:de:9f:b3:5a:63:a9:55:0a:
         48:19:24:cd:a5:9d:7b:4d:a0:9f:55:b4:be:3a:12:24:8e:c3:
         9a:14:e1:1d:d9:98:f2:c5:2e:69:13:be:f0:c2:b6:0e:ca:5f:
         04:4b:7b:b3:d1:1a:ad:5b:f2:df:c1:02:54:9b:c1:c9:88:77:
         3b:c5:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:32 2026 by rpki-client