Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/c2834b35-04ad-3a81-972c-19370ce9af16.roa
File:                     c2834b35-04ad-3a81-972c-19370ce9af16.roa (raw, json)
Hash identifier:          TFIk7OVWzZWDW48xVEhCLltIwuTgB8FSj2fJnbA1MKg=
Subject key identifier:   C6:DA:BF:2F:35:EE:D3:29:35:B6:DB:BA:C8:7D:F3:36:84:67:9E:E5
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584E1FA9A1931B45823A3D9BD700
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/c2834b35-04ad-3a81-972c-19370ce9af16.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     22245
IP address blocks:        2001:49d0:c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:93:1b:45:82:3a:3d:9b:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=7d015e47-5aa7-4c69-86d5-171f91d5e834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a1:5b:1b:8b:97:0c:54:bf:14:97:7d:47:64:
                    bd:7e:2d:6b:26:10:85:e7:27:90:e1:72:1d:d9:d1:
                    e0:9a:34:f5:4a:d2:0a:f6:14:c8:91:7c:85:df:01:
                    e6:8a:98:85:8e:fb:96:f1:41:a2:84:f1:65:6a:ce:
                    0a:63:04:db:3a:6c:25:bc:1b:84:a4:04:98:22:08:
                    f4:b2:a5:03:39:de:7b:f4:8b:83:37:59:0c:f2:77:
                    47:44:a1:8a:53:f6:60:c1:41:eb:9d:96:1d:b1:2e:
                    ed:9c:12:47:03:a6:83:5c:70:fe:12:0f:b1:18:be:
                    62:e4:e8:5e:de:3f:4b:db:7d:45:70:a2:cb:14:14:
                    cc:6f:b4:23:70:c6:a9:08:b7:7d:aa:c0:3d:92:14:
                    fd:b4:d1:5a:49:07:29:14:ce:e3:b7:f6:cd:fc:ac:
                    e6:83:16:26:0c:63:6b:6c:f2:a4:89:26:e9:52:d7:
                    03:de:22:a6:fc:dc:41:b0:c5:8d:0f:1d:19:22:9d:
                    ce:d8:1f:b0:7f:55:39:5c:1a:fb:cd:29:c4:ed:c1:
                    e3:d5:40:d2:ca:06:f4:dc:4f:8c:24:f0:46:9c:6a:
                    34:9c:c6:4b:c7:ad:a0:65:fa:88:d5:b4:51:27:55:
                    be:24:0b:81:a2:2f:3a:40:d7:a2:f0:7c:53:b6:91:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:BF:2F:35:EE:D3:29:35:B6:DB:BA:C8:7D:F3:36:84:67:9E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/c2834b35-04ad-3a81-972c-19370ce9af16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:51:98:bb:83:ad:1e:8a:4b:e9:43:f2:cb:64:a2:53:f5:a8:
         03:97:63:cf:66:b5:b5:1e:c0:20:6b:43:11:e0:67:0a:53:12:
         01:03:6c:ff:62:f1:2f:c9:06:be:42:4b:31:77:bb:48:e7:de:
         ca:ac:c9:47:82:e9:08:55:75:d2:da:00:cc:29:8d:b4:fa:54:
         8a:44:11:39:5a:e2:18:a5:05:65:6a:e7:0c:b0:64:34:85:d0:
         1f:3d:b3:54:6a:be:97:de:30:9d:bf:63:b9:77:a7:36:4d:2d:
         17:de:8f:64:1f:af:53:99:fb:97:63:91:64:82:91:bf:81:94:
         ed:9c:4b:4f:c8:30:69:6f:1d:c4:97:10:7f:dc:bc:9b:61:d5:
         e6:72:bc:e3:6a:43:dd:c4:6e:59:f9:5e:da:53:9e:c1:82:7d:
         8c:6e:6d:c3:bf:66:11:3b:72:68:9e:6e:23:b4:d3:df:5e:15:
         4e:3a:b2:75:8f:6f:71:ba:e1:7b:2b:5a:62:ba:01:7f:9a:89:
         73:ce:b5:df:16:3c:f5:55:74:7d:db:9c:a6:68:f7:76:db:3a:
         38:82:b8:60:34:48:52:24:72:f5:36:de:9c:aa:c9:44:47:1c:
         93:94:63:64:2d:5b:13:12:fe:c4:1d:6a:29:74:8d:bc:c8:57:
         67:0a:87:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:41 2026 by rpki-client