Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9a7d788-f843-3d8a-806e-8bb9e0ab0ab8.roa
File:                     d9a7d788-f843-3d8a-806e-8bb9e0ab0ab8.roa (raw, json)
Hash identifier:          yENQh+XqNN6y7OyaJd4dnMkJX1jRGnjUCXU/+mqZiW8=
Subject key identifier:   BC:83:F1:48:8F:6C:D5:2D:84:8C:F8:21:83:FF:22:85:51:03:D0:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E000632348B9C85B385FA74C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9a7d788-f843-3d8a-806e-8bb9e0ab0ab8.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     32651
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:32:34:8b:9c:85:b3:85:fa:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=53b01807-1413-48be-96f5-fa924774825c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:db:bd:ed:5c:63:cf:b0:5c:6b:bd:0c:55:
                    a0:27:b9:13:e7:5d:27:ed:8b:99:cf:c3:b0:01:1b:
                    33:b3:e0:0e:15:70:e7:3d:b9:0e:bb:9c:fd:b2:1e:
                    c5:20:c1:89:91:7a:cd:16:b1:22:23:13:b9:b1:97:
                    53:67:8b:51:9d:ec:aa:18:c9:dd:0e:36:7c:36:8e:
                    91:ce:05:bb:6a:0d:50:a6:4f:e0:f9:6c:ae:f4:63:
                    9e:22:73:26:55:e1:ef:2a:de:f6:7b:3c:24:40:93:
                    87:f4:03:cd:f6:b4:2e:ad:e9:78:c1:47:36:d0:4f:
                    a9:3d:e9:64:9a:14:76:55:6b:bc:73:c1:a7:62:6f:
                    27:9e:da:d2:39:81:73:3a:d4:4d:df:44:f2:bf:1b:
                    82:3a:ba:74:1a:cf:1d:95:1b:72:cc:76:ca:d2:e0:
                    aa:ce:0e:1b:f7:ce:6e:a5:09:d7:8b:78:a9:60:42:
                    8c:08:45:77:a2:d4:eb:5a:40:e4:e2:9e:c2:91:34:
                    d1:81:53:fd:cc:b3:c6:8d:f9:96:4a:db:52:11:c7:
                    d3:6e:5f:79:01:ec:3d:a6:ef:cd:79:16:75:8e:2a:
                    a1:45:8e:8d:83:87:2f:ce:98:f1:af:dc:ac:0d:34:
                    2c:b7:a3:67:89:4c:17:d7:47:25:6e:d8:c1:45:e1:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:F1:48:8F:6C:D5:2D:84:8C:F8:21:83:FF:22:85:51:03:D0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9a7d788-f843-3d8a-806e-8bb9e0ab0ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:9c:29:b0:4c:d2:82:4f:69:cb:8a:9f:84:6b:fa:b3:ea:
         66:74:08:14:b3:1b:f1:1c:02:06:eb:49:7a:19:39:ce:96:57:
         fa:13:5e:a0:0d:9b:13:31:00:66:d2:15:d6:9f:f3:0c:f8:f0:
         ae:ff:af:b5:7a:49:00:78:70:87:86:a2:df:2e:97:9e:16:2f:
         68:9f:16:b2:e1:69:9c:f1:7e:66:98:57:7a:4f:2e:5e:7b:e2:
         4d:f1:d5:39:ae:80:43:3c:05:31:2f:db:81:20:e9:c8:16:d8:
         89:42:b6:aa:c1:d0:06:fa:7e:86:8f:c0:57:cc:8e:94:83:0a:
         79:fc:db:14:53:fc:b5:b8:ab:c9:04:f6:c7:2f:25:ab:66:f5:
         1f:89:ce:5c:25:47:b5:94:6a:8d:51:18:ab:c1:06:60:92:84:
         47:79:7f:43:ed:54:da:ea:b6:20:fe:55:ec:37:6b:30:b2:5a:
         61:8f:71:59:40:31:77:7a:0f:ab:4a:f6:a2:a0:cf:01:a7:62:
         c5:9d:a3:57:e1:d4:a5:a1:44:14:d3:12:a4:6e:a2:49:85:c1:
         ac:6c:14:a4:a4:84:a7:82:54:c9:c1:41:00:d0:7a:ee:59:7d:
         a4:86:20:53:d7:0e:f8:35:4d:54:f0:8c:e4:c5:a1:1b:c3:28:
         70:45:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:43 2026 by rpki-client