Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
File:                     9ffa16d3-2d08-3707-98b5-07d9e1313429.roa (raw, json)
Hash identifier:          QSGTgWQh+lyWwnOh7yOmRXjwC9LCY4jacSegIPJz4sQ=
Subject key identifier:   60:F8:2C:66:35:8B:4E:AB:88:4E:10:1C:BC:16:47:90:E9:1A:32:DA
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584E1FA9A1AB82D1122B31DD9580
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     15116
IP address blocks:        2001:49d0:180::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:ab:82:d1:12:2b:31:dd:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=89074caf-b842-42da-95c7-ba3389ed4887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:cb:7c:38:02:40:ec:6b:83:50:de:43:10:
                    55:7d:6b:5b:21:4e:d4:c7:f9:ae:30:78:ea:29:bd:
                    b5:bb:b7:44:7b:c8:1a:31:da:1a:ea:28:b9:7e:d3:
                    9a:d8:d9:f3:ea:95:c4:76:10:2a:14:e6:ab:57:db:
                    5f:42:d5:0a:e6:0e:60:81:ad:5e:cd:72:5d:af:ad:
                    ab:49:86:cf:83:fb:82:4a:91:06:74:68:18:3b:4a:
                    80:a8:c5:eb:0c:89:d0:e3:b0:4c:a0:b2:73:4c:f1:
                    e6:31:fe:bf:6c:51:15:a5:ea:ed:eb:94:ea:80:3a:
                    17:f2:e5:e5:de:e0:58:90:4c:9e:9e:3a:95:1c:7d:
                    55:b8:3b:de:14:df:b5:e8:06:19:0c:d1:b2:ed:02:
                    a8:29:cc:b2:e7:65:b9:94:e6:93:d8:36:dc:c2:da:
                    8b:f1:35:3a:eb:b2:19:85:42:2e:8b:be:e7:bb:61:
                    41:6e:5f:b8:2f:bb:d2:0a:c1:ae:0e:2a:5a:f8:64:
                    bd:61:a2:5f:12:15:fc:bf:17:a7:b7:69:09:45:ad:
                    0b:d3:80:7a:4c:18:29:08:12:58:be:48:c7:88:67:
                    dc:76:e1:4a:9c:bc:84:14:db:77:c3:54:b5:31:4b:
                    41:e2:c4:29:93:b4:7d:92:c7:5c:aa:77:be:b5:3a:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:2C:66:35:8B:4E:AB:88:4E:10:1C:BC:16:47:90:E9:1A:32:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:180::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:93:64:83:14:44:79:d8:78:2e:cc:4c:02:48:8d:b3:85:0b:
         09:6e:b6:88:d7:a3:56:fe:b6:f1:db:34:bc:e4:83:5d:cf:32:
         c4:7b:d2:9b:30:f8:44:28:01:3e:ac:1e:bc:59:dd:13:64:39:
         7c:ed:29:d0:f2:f4:12:22:71:03:fd:6b:53:ed:45:f7:fe:bf:
         26:16:47:77:ab:af:ef:31:c1:49:17:3b:84:b5:ab:a1:a6:a6:
         63:66:78:2a:c6:11:07:31:69:2c:75:0e:b3:5e:8d:fe:91:f5:
         52:76:53:ea:a5:2e:76:3f:46:aa:ab:81:8b:5f:d3:45:05:d2:
         43:67:cf:79:9f:2c:21:12:36:78:6d:d8:e6:cd:84:70:4d:8d:
         ab:32:9f:9d:f3:a3:62:f5:87:57:2b:b3:da:04:2d:43:88:88:
         1d:2a:cc:2c:ac:0e:a5:2e:10:1b:3f:31:49:35:4b:a4:99:8b:
         e6:08:e9:e5:4c:2f:45:b0:d3:3d:17:d2:13:4d:6f:7f:28:94:
         b7:36:46:18:c6:2c:3e:fb:4d:0a:f4:68:be:81:5c:04:64:20:
         38:9e:a0:26:95:dc:35:ce:14:a3:1a:c6:da:50:0d:3b:30:c5:
         7e:f2:11:5f:87:c8:7b:c3:be:1a:e2:96:bc:74:ab:29:ea:54:
         f1:78:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:35 2026 by rpki-client