Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa
File:                     db638a98-8c91-3c07-8d1f-b5d48341e72b.roa (raw, json)
Hash identifier:          jscvguQNclkygx6Oudh+EJqif6bUFUxEhx4Hj+mQTUU=
Subject key identifier:   F5:02:7A:84:7F:D6:7F:C6:97:1D:8D:5B:3D:C8:68:F1:A2:00:11:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B84895BA14965C86AF880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa
Signing time:             Thu 04 Jun 2026 14:26:45 +0000
ROA not before:           Thu 04 Jun 2026 14:26:45 +0000
ROA not after:            Wed 02 Sep 2026 14:26:45 +0000
asID:                     396583
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:84:89:5b:a1:49:65:c8:6a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:45 2026 GMT
            Not After : Sep  2 14:26:45 2026 GMT
        Subject: CN=01866c5c-76a5-4e80-b65a-3026d49e8531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:ec:fb:34:81:9c:41:9f:2b:66:20:ea:40:
                    ba:45:15:bb:e7:2c:69:c8:d5:b1:60:cc:d1:eb:f0:
                    70:6b:30:e8:95:d6:3f:4b:22:9a:82:d9:be:e1:41:
                    23:d4:69:b9:a9:5c:d0:4e:67:13:be:82:93:19:f5:
                    9f:c0:f1:a9:16:9d:1e:bd:f6:db:b5:45:df:14:d0:
                    64:43:0f:58:41:ae:de:f5:32:7e:c2:3b:85:ec:31:
                    ce:c1:13:f5:79:27:8e:9f:e1:0e:e0:99:06:f9:58:
                    5b:c9:a5:43:fc:fc:40:ad:35:e1:b1:b1:2b:b1:7d:
                    7d:17:da:c6:71:bb:37:53:7c:ef:db:28:9f:d2:35:
                    ca:31:e4:b2:db:7b:89:ea:e0:d3:1e:45:78:fe:f5:
                    fb:3f:8b:78:99:ce:ce:fb:6a:5d:f1:c7:9a:5b:e9:
                    d8:84:4a:8f:18:1f:70:28:cc:cd:2d:3c:b2:66:3a:
                    5c:9a:01:d6:20:84:aa:bb:c7:0c:29:64:21:63:00:
                    03:5f:2c:2f:e6:95:ae:58:7b:de:cd:f5:7b:59:73:
                    23:d5:25:b6:c4:37:e7:fc:c6:8b:15:f7:ad:c3:24:
                    86:f0:52:f9:42:07:7b:8f:81:a6:27:a9:45:99:aa:
                    67:06:35:e2:bd:f5:76:07:bf:79:8d:3d:2a:ab:73:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:02:7A:84:7F:D6:7F:C6:97:1D:8D:5B:3D:C8:68:F1:A2:00:11:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f2:43:37:4a:9b:07:d4:1e:4f:66:99:5c:57:6d:f4:6e:2f:
         84:44:32:b7:fc:db:db:b1:c6:22:80:c0:77:5d:a6:e4:ac:f3:
         9f:2a:81:1d:1e:04:30:0c:12:4a:97:29:eb:cd:f0:6f:b7:dc:
         92:e4:55:7e:1c:46:90:8c:9e:7d:64:cc:25:a7:c3:bc:8c:71:
         8d:b4:d0:ee:f8:e3:34:c5:1f:61:5f:15:8d:48:c9:66:32:47:
         a1:16:18:f2:01:d5:4a:8d:fd:07:93:87:2c:34:1c:cd:ec:65:
         2c:4f:7b:fe:9a:65:5a:2e:a6:be:14:57:b3:72:dc:8d:99:9c:
         fb:29:31:f1:44:df:0d:22:fe:ea:de:8c:f0:32:06:eb:a2:17:
         c0:31:2e:ac:74:f5:ae:5a:b2:5f:b3:35:00:cc:8e:f3:3a:4b:
         ed:1a:30:f9:1a:24:c3:51:1f:03:99:41:fa:7e:5a:17:7c:36:
         80:8b:0c:68:64:bb:c2:c0:3a:c3:40:bf:7b:df:7d:9b:b3:ba:
         c4:26:dd:c5:00:17:45:76:48:e9:51:4f:99:f9:73:c3:01:22:
         3a:84:be:b8:b6:07:34:76:a6:ac:df:ac:d6:c8:ff:c9:64:b4:
         06:ef:85:2c:1a:f6:f4:bb:f9:5b:04:b2:32:ee:81:6a:fb:db:
         e3:1d:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:49 2026 by rpki-client