Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e700193e-d8a3-3de7-b0bf-9e9fa70e5133.roa
File:                     e700193e-d8a3-3de7-b0bf-9e9fa70e5133.roa (raw, json)
Hash identifier:          aCYe+tprgI1sqwPRTZALOa/x5qc8xT7N5eMn91+yq8A=
Subject key identifier:   1F:35:3F:3B:6F:A8:F5:32:D8:E3:0E:06:35:2A:E8:F2:03:E5:56:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F24C19C969809D88C7A7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e700193e-d8a3-3de7-b0bf-9e9fa70e5133.roa
Signing time:             Tue 02 Jun 2026 14:18:59 +0000
ROA not before:           Tue 02 Jun 2026 14:18:59 +0000
ROA not after:            Mon 31 Aug 2026 14:18:59 +0000
asID:                     396553
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:4c:19:c9:69:80:9d:88:c7:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:18:59 2026 GMT
            Not After : Aug 31 14:18:59 2026 GMT
        Subject: CN=1622a425-1b50-4a8f-bd6b-a2e988aee72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:bd:9e:eb:a1:15:d4:33:04:55:7a:31:86:
                    e2:82:82:eb:64:ef:2f:c6:8e:62:55:f7:d0:fa:25:
                    8d:b1:a1:67:91:0c:d6:ba:58:ef:d0:42:8c:5f:81:
                    d5:0d:a5:e0:d1:1b:d9:d9:2e:0c:5b:11:b5:47:4a:
                    9f:95:11:79:05:82:cf:80:10:fc:0b:e4:45:d0:d6:
                    20:4e:56:cd:c6:91:18:8a:41:5d:99:11:ad:34:ba:
                    11:ea:f3:6e:fd:e2:bd:8a:e7:9c:cf:f0:83:e4:6d:
                    49:da:74:47:cf:63:8b:73:4d:41:b2:00:f4:bb:a0:
                    94:16:74:71:a5:32:f9:08:2b:82:90:20:84:d0:8e:
                    d8:e6:f6:6a:bd:af:6d:8f:6c:17:60:32:e0:79:ed:
                    fc:4d:8c:ee:47:a9:d3:b6:99:bc:df:28:fb:0b:43:
                    ac:fc:59:66:87:b7:29:ec:e4:2e:30:9a:84:9b:da:
                    31:3f:54:a6:0e:86:50:3f:94:46:e6:25:61:38:7c:
                    30:57:fc:47:cc:0c:c6:68:68:f0:7d:5d:33:93:1f:
                    cd:80:99:fe:c7:bd:28:b6:7e:fd:02:67:5d:24:73:
                    0e:89:ec:55:67:fa:fa:46:f7:d4:2d:99:6b:99:90:
                    2c:0d:e2:c6:25:4f:69:46:b4:c2:9d:01:41:1c:1a:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:3F:3B:6F:A8:F5:32:D8:E3:0E:06:35:2A:E8:F2:03:E5:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e700193e-d8a3-3de7-b0bf-9e9fa70e5133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:38:47:76:b8:ed:04:3b:e3:3b:73:2f:30:7e:08:e6:23:
         f0:02:20:21:3a:f7:2d:ca:00:81:2d:9c:8f:17:43:3e:62:7c:
         c5:f1:b0:d1:4d:68:6c:f7:b8:de:49:d1:3b:ae:4a:16:7b:a9:
         76:f1:53:a1:a4:5f:4d:7b:77:c7:e5:a8:96:e6:11:98:a8:cd:
         85:27:bf:00:28:f3:a1:48:39:f1:81:6c:e3:6c:2c:56:a4:2f:
         59:55:2e:59:a2:fd:2b:f7:4f:b4:fe:a0:f7:28:0d:7e:35:e6:
         76:8d:4f:26:85:5f:41:1e:40:0d:1d:f7:1c:b6:53:e1:1e:76:
         aa:f6:2e:fc:dd:4d:e9:2d:5b:a3:f0:21:6c:60:62:20:55:fe:
         91:5e:f0:6c:c5:59:4e:4c:18:bd:a6:7a:8a:5f:f4:c0:3f:e7:
         77:22:5d:11:d8:6d:93:73:08:1a:bf:df:cd:24:03:3a:b0:38:
         65:38:80:a1:34:c1:5a:78:5f:95:e2:0b:ff:6b:92:44:23:1f:
         80:61:bf:da:4c:e7:47:df:9b:ad:07:7d:b5:33:91:7c:19:5b:
         98:a0:46:58:55:1f:8d:7a:b0:2e:fe:51:77:60:09:96:af:fe:
         0d:ba:70:7f:da:fa:8c:77:fa:05:59:1a:f5:1c:e7:3f:80:31:
         e1:5a:e0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:45 2026 by rpki-client