Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58afeee-921c-37b6-8b26-093b22f7bae4.roa
File:                     d58afeee-921c-37b6-8b26-093b22f7bae4.roa (raw, json)
Hash identifier:          3yBzqOezT6axOivPmqnQDU/SSyhcFUNF9Sq7ZAUQ6j4=
Subject key identifier:   BF:F2:EA:23:D8:6D:53:B7:28:E9:15:C2:FB:78:74:3B:CB:FE:2D:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C81163E16EC1E6E19B2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58afeee-921c-37b6-8b26-093b22f7bae4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     397207
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:81:16:3e:16:ec:1e:6e:19:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b63ac014-209c-41a9-a4af-0467319b25e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:81:a1:f1:83:e7:ff:cc:b3:e0:ac:2f:7c:
                    76:5d:43:c8:36:20:7a:38:cd:1e:7d:9a:28:e3:6a:
                    a8:94:6a:63:ac:f5:d5:37:1f:8b:03:ef:aa:26:8e:
                    a6:16:95:dd:ab:fb:c6:68:d5:09:45:94:8e:b9:21:
                    b1:46:ad:9a:49:fc:4f:65:97:75:17:11:5b:cc:39:
                    9c:d7:af:35:5a:ca:0b:cd:7b:e0:49:76:21:df:b6:
                    e0:45:e0:1d:6d:8f:55:96:ee:bf:6f:d3:d4:70:38:
                    66:14:64:3e:c3:13:d0:f4:bc:c3:eb:7b:e4:47:82:
                    9b:94:14:26:8d:ad:69:cb:7d:df:3c:e3:e6:c4:d4:
                    6c:45:b7:15:f8:ee:de:d0:26:0b:64:e9:15:72:59:
                    17:7e:50:e1:d3:a0:ed:6d:1a:d7:83:52:bc:be:c2:
                    bc:79:14:d4:94:d4:b7:81:67:25:5c:ff:b0:2a:5a:
                    dd:cc:ee:99:a7:7d:da:d6:3c:14:e2:35:e1:5f:38:
                    1d:c7:be:ef:5c:b4:6d:db:fc:6c:c3:ac:43:a8:ba:
                    23:c1:d0:20:59:ce:b1:16:5f:2e:a2:9b:4f:cd:aa:
                    6d:91:21:a0:1f:42:7a:aa:1f:bd:c3:da:9b:2f:3c:
                    cd:b0:50:75:49:ab:8f:47:0a:c0:f7:c5:88:d5:d4:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:EA:23:D8:6D:53:B7:28:E9:15:C2:FB:78:74:3B:CB:FE:2D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58afeee-921c-37b6-8b26-093b22f7bae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:ba:69:0d:14:7e:69:b2:03:a3:12:f8:d1:43:7c:b5:43:
         b9:2d:fb:77:e2:97:c7:c0:35:2d:73:9d:27:77:64:3e:1d:73:
         46:59:b5:8b:4c:5b:d1:cb:aa:53:16:a9:c1:ee:b0:d5:99:7e:
         bf:75:a5:2f:79:83:45:d7:fb:8f:8f:83:42:52:5e:13:b7:81:
         05:f1:da:69:cf:6a:7a:f4:83:1c:43:1f:c5:de:e6:6b:60:45:
         62:cb:a3:0e:5c:86:78:83:6b:3c:63:4a:5a:d2:a8:1a:11:9a:
         ac:b2:ac:6b:d8:02:3d:b8:4d:02:32:29:9b:54:02:fb:25:45:
         7d:ed:be:85:b9:bb:dd:27:7d:9d:3d:97:dd:ba:58:90:12:10:
         fe:75:c3:a3:05:9f:6c:6f:e9:89:95:8d:6c:3b:34:26:50:c3:
         6f:9a:ba:4e:5b:cf:d5:e9:47:91:46:35:12:d5:8e:bd:9c:9d:
         56:90:94:6b:c2:0e:02:14:ce:39:58:8d:c1:72:db:63:db:d6:
         aa:59:28:07:f2:36:56:17:32:20:7c:5d:97:80:ba:49:52:bc:
         63:f0:d7:ca:ba:58:5e:ca:61:f1:e8:b5:ec:66:93:6a:68:fa:
         fd:a1:bc:d2:66:2b:a3:9e:f3:8b:5e:4f:48:31:fa:44:40:4e:
         9d:51:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:54 2026 by rpki-client