Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db7fb0f6-e690-33af-b7fa-9144731483e6.roa
File:                     db7fb0f6-e690-33af-b7fa-9144731483e6.roa (raw, json)
Hash identifier:          98yn5hSPFh14vW28geszcnlTgkHH6B4YLoUOkKPXMik=
Subject key identifier:   3D:A2:3F:95:21:FF:97:CA:9D:36:A4:28:0D:04:ED:99:E5:63:B3:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F24D799F5E8036BCEDC0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db7fb0f6-e690-33af-b7fa-9144731483e6.roa
Signing time:             Tue 02 Jun 2026 14:19:00 +0000
ROA not before:           Tue 02 Jun 2026 14:19:00 +0000
ROA not after:            Mon 31 Aug 2026 14:19:00 +0000
asID:                     396713
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:4d:79:9f:5e:80:36:bc:ed:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:19:00 2026 GMT
            Not After : Aug 31 14:19:00 2026 GMT
        Subject: CN=3b3ba378-04a1-4488-99d7-819aef9e014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:f2:c8:12:0c:cc:28:10:a9:f9:45:9a:41:
                    4a:98:80:49:4c:22:2b:f8:ff:b7:72:e5:45:be:7d:
                    58:26:c3:c3:d0:56:e6:24:c1:ab:b9:cb:c1:97:47:
                    8c:a7:07:37:36:26:de:e1:b8:3f:e8:2e:6f:44:28:
                    8f:05:fc:de:33:b9:22:fb:ca:08:2e:cf:48:a5:97:
                    df:34:4a:88:69:63:72:6f:58:10:aa:36:31:94:b8:
                    59:a1:2e:8f:ae:da:2f:6d:b3:b1:96:52:c5:96:ab:
                    63:22:2b:83:2e:93:dd:35:22:9c:0a:94:33:84:a3:
                    3f:b0:de:8c:1c:4a:d9:08:0e:55:1b:a7:cd:8d:53:
                    07:88:80:09:1e:06:78:b2:25:b6:08:7b:ed:85:3b:
                    72:19:4c:ac:fb:1f:6a:7c:ae:cf:dd:d2:01:2b:66:
                    40:77:73:0e:22:1c:5c:b0:d3:61:e1:c7:cb:17:d2:
                    22:0c:f1:8e:ad:8a:40:c7:a1:25:b6:bc:43:86:d1:
                    8a:ab:6b:b9:53:ce:9c:a9:78:84:2b:3b:5d:e1:44:
                    83:ff:89:93:44:90:3f:19:a5:14:ac:fe:28:f7:7e:
                    cd:ea:a7:da:fd:1f:f5:e9:28:6e:5a:de:9c:02:60:
                    7d:fb:bf:43:cf:0f:6a:57:9c:41:da:24:dd:70:a8:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:3F:95:21:FF:97:CA:9D:36:A4:28:0D:04:ED:99:E5:63:B3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db7fb0f6-e690-33af-b7fa-9144731483e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:fc:07:68:e2:05:f4:b5:d7:90:b1:9c:cd:bf:19:80:73:
         60:fd:e8:7f:31:b8:89:bc:9e:47:52:79:2f:4a:0e:e5:65:98:
         63:3e:c9:30:4a:85:0f:1e:38:21:40:b2:57:9e:c2:3c:13:19:
         19:6d:2f:43:2e:10:ae:4b:d1:f2:c3:3b:75:98:11:d1:d5:32:
         ca:4e:e9:5d:82:f5:57:51:8d:24:db:69:88:a1:23:fe:7a:97:
         54:18:87:7b:be:80:07:be:50:4f:19:1e:fd:4e:67:6d:0c:ac:
         5d:45:b2:d5:e8:d2:43:8b:a0:13:18:cf:93:f4:c4:9c:47:88:
         9e:d9:7e:33:04:18:64:07:8d:d1:5a:6f:34:54:da:a1:9a:9a:
         dd:52:8e:cf:bd:42:e8:89:b3:69:65:13:04:49:e8:9f:9a:d3:
         15:1a:3e:9b:a1:eb:8e:b4:6f:e9:57:aa:29:6b:f2:37:4c:03:
         38:98:a3:68:73:6c:c3:ca:e4:af:6a:ca:15:34:6b:0f:d1:61:
         43:04:d4:a0:65:87:08:33:4d:2b:13:03:7a:1e:29:00:12:9b:
         a9:10:f3:87:38:b0:51:82:33:fd:bd:51:73:3b:a4:7e:5f:f4:
         81:cb:31:ae:11:95:e3:15:42:e3:36:40:dc:93:2b:c4:22:7b:
         69:76:64:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:29 2026 by rpki-client