Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa
File:                     d9b147c2-b75f-3915-ae7c-3d41e4313208.roa (raw, json)
Hash identifier:          ZcUN01oA2Q0faSVp6QUvP42867wVg5U8+9aT/1B4GMo=
Subject key identifier:   A8:79:B9:4E:3B:ED:D7:C5:B0:EB:F1:04:87:4F:5B:A6:D7:54:34:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198C255C5C7B28FC2DD200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     396572
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8c:25:5c:5c:7b:28:fc:2d:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=0e3ab632-7756-475e-ab41-02d60f3a8ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:30:7b:b9:8c:75:b2:54:c3:c0:d5:bb:60:
                    8a:68:41:d1:a6:f9:75:63:7f:67:fa:f6:4a:0b:ee:
                    65:c3:6f:34:df:f6:64:93:eb:a7:29:70:70:f9:4c:
                    f6:44:33:59:84:42:dc:37:58:16:c0:83:10:6c:7b:
                    92:19:83:09:2b:2b:9a:d4:a1:ed:fa:68:39:19:e1:
                    20:06:85:42:0d:d2:34:85:46:1c:9e:b8:4d:5a:5e:
                    27:93:6d:e4:c0:a9:e4:bb:3a:27:9e:28:49:25:cd:
                    c4:d8:6b:ef:d9:b8:cc:aa:aa:8c:7f:3a:ec:23:76:
                    8c:41:79:88:f5:e6:85:ac:8e:bc:be:33:29:77:b2:
                    40:22:5c:9a:dc:57:27:9b:6b:0a:9c:89:05:d5:bc:
                    d0:e1:93:bb:4c:09:18:a3:b4:a1:13:12:e5:27:bf:
                    60:61:66:9e:75:e2:8b:3d:ba:a0:54:0e:f2:79:ae:
                    91:23:28:0d:2e:6f:23:bb:1e:0e:a5:16:b9:9f:87:
                    1c:64:67:4a:52:98:6e:41:1e:c4:c2:6a:03:1f:8b:
                    7f:31:fc:34:21:f7:df:90:b4:45:33:b7:71:48:fc:
                    7e:7a:e3:89:67:d0:59:3e:f2:4a:5a:ec:e7:14:b9:
                    d0:7c:4f:40:73:2f:45:d6:b8:56:93:9b:51:7d:26:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:B9:4E:3B:ED:D7:C5:B0:EB:F1:04:87:4F:5B:A6:D7:54:34:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:4a:b3:c6:77:a5:6e:2e:0b:55:8c:69:04:81:53:3d:5a:
         e2:dd:28:12:48:b7:c9:24:4f:6f:13:9a:24:fd:e5:cb:6e:d4:
         01:cc:8d:0a:fc:c9:cd:24:26:f0:98:21:ce:0c:44:2b:ee:97:
         a9:90:cb:57:fa:6c:78:42:c1:43:9d:26:44:b2:18:99:1c:24:
         64:cb:e2:d6:bf:c6:05:21:32:ee:c8:78:9c:b9:51:d5:63:4b:
         f3:58:4b:60:9e:91:ad:89:44:0b:4b:44:85:2a:ed:b6:18:0e:
         cc:54:1c:77:54:0c:25:4b:dd:93:cc:fc:14:2a:10:e1:57:fd:
         27:75:23:37:ae:e0:83:f7:08:77:11:d7:e9:eb:96:34:ee:49:
         41:0c:2b:69:2f:82:f7:eb:47:45:ee:9c:02:47:6c:3b:dc:24:
         7c:8d:93:bb:eb:4a:ac:b7:f4:2b:dc:f3:a7:b1:50:a3:2f:5a:
         0d:98:35:bc:74:89:94:01:dd:d8:c6:9f:a0:d1:7f:a1:9e:96:
         3d:2a:a6:80:e8:f6:8e:38:13:63:67:24:aa:f1:49:05:5b:ab:
         8d:cc:a8:39:f7:4c:dc:c8:b1:95:ed:a7:86:26:15:21:88:8c:
         b0:84:88:1f:0c:46:8b:4e:c1:c9:19:a1:5c:65:68:78:cb:ee:
         98:ed:e8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:46 2026 by rpki-client