Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa
File:                     ea699035-fd1f-3b9c-be57-758cbdb50a65.roa (raw, json)
Hash identifier:          GRujS+LmSa6K0MUQR/Nx+Jr0eJRV6OQ4ysqp+PNtJ/M=
Subject key identifier:   34:4E:FC:A8:13:5A:9D:61:BF:C1:55:CE:B9:FC:F7:7F:01:03:E8:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198C85DD6A4DF9D3B86200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     20431
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8c:85:dd:6a:4d:f9:d3:b8:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=5d084ad3-1698-4f6b-bebb-b8538ba0a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:39:b6:34:a8:47:99:54:4a:3a:03:4e:14:
                    ff:ad:c0:19:72:cf:37:df:b3:ba:18:4e:8a:48:41:
                    95:31:d5:c1:4f:06:a3:04:fb:68:f6:b4:e7:24:71:
                    ee:0c:13:30:58:73:44:ec:c6:2c:97:b2:fd:07:c8:
                    de:56:5c:ba:5a:e9:fb:c1:f4:44:7e:1d:37:f3:dd:
                    52:1c:6e:cb:56:a2:27:fe:58:b6:75:7e:c5:58:da:
                    72:7d:bc:85:39:08:78:4c:39:87:0a:17:6c:a0:c3:
                    ff:91:b2:2b:33:48:2f:df:74:07:c4:0b:6e:76:43:
                    b6:5c:a8:2d:e0:dd:c4:57:e3:58:64:55:fc:62:5a:
                    a9:ff:8d:e8:ce:6e:68:e0:6f:d2:d6:4f:2e:ee:32:
                    40:67:14:2e:e2:a7:7c:e6:44:d5:0e:de:64:8a:ec:
                    04:b3:8f:49:dd:ae:47:3f:ff:29:e7:00:a9:c5:9b:
                    3f:8f:7d:9d:6e:06:aa:83:3d:31:47:77:88:4d:55:
                    d0:04:db:2c:8d:0f:30:ad:8f:07:d7:c7:79:d7:8d:
                    4b:7b:05:ee:40:e3:45:62:37:7d:de:a0:95:1f:38:
                    52:71:5f:c2:07:66:87:58:e0:4a:03:b9:94:8b:6e:
                    26:a5:dd:e5:d2:d5:c5:86:4e:99:c5:f9:fb:11:e9:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:FC:A8:13:5A:9D:61:BF:C1:55:CE:B9:FC:F7:7F:01:03:E8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:dd:49:a5:9a:66:cd:50:3c:59:ad:0e:9f:24:9b:d7:b9:
         3e:47:40:1d:05:27:bf:40:1a:31:08:c4:a5:ac:cb:5d:7d:3f:
         15:68:36:b9:30:b3:4e:98:91:6f:64:1d:ad:63:6f:b3:d0:13:
         53:11:53:21:ca:0a:c0:0c:90:45:96:7b:e8:90:c9:8f:ff:7b:
         00:4c:34:1f:7a:1a:8e:55:18:4d:10:33:19:10:99:da:dd:a4:
         75:cd:e5:ed:25:01:e9:24:2a:69:0d:43:bd:5b:30:c2:8b:83:
         d0:c1:e3:6e:78:54:63:4c:07:1a:00:95:62:45:e4:19:90:c5:
         18:a9:33:d5:c6:a1:86:d3:6f:17:54:82:4f:12:cc:ba:bc:ba:
         01:62:84:a0:c8:ac:71:3f:96:2a:75:57:a1:af:c5:20:54:3c:
         8d:70:db:e5:07:a6:7a:a7:2f:60:7d:5a:ab:0b:bf:87:e9:c9:
         e7:68:d1:9e:bd:21:75:dd:89:c2:af:a7:23:7f:ae:f3:9a:ed:
         cf:88:c5:7a:82:10:f4:d5:21:e2:b4:a8:e7:a1:22:0c:62:f7:
         c1:00:bb:d3:40:ca:c4:da:b5:1b:32:a8:44:67:a9:72:5d:9a:
         7c:08:bc:bd:af:21:d6:f5:5a:b0:d1:4e:62:59:56:bf:ff:48:
         4d:72:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:56 2026 by rpki-client