Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0473a7e2-0c49-3bad-a691-955fd2f52894.roa
File:                     0473a7e2-0c49-3bad-a691-955fd2f52894.roa (raw, json)
Hash identifier:          3nAlf4G9rpr1UXijIONgYSas2Ea1aLz0ZP7KLOFrEGA=
Subject key identifier:   FF:C7:D6:06:9C:F9:E5:95:CF:31:6C:20:51:B4:45:5C:CF:FA:F6:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9DDDBEA1DBCF7A5B84300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0473a7e2-0c49-3bad-a691-955fd2f52894.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396566
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:dd:db:ea:1d:bc:f7:a5:b8:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=e91044ea-0235-4715-b8c6-cd541dfb617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:5d:98:87:d1:44:de:fe:75:0c:62:67:21:
                    9d:1a:ee:eb:44:b3:d4:19:08:dd:d6:44:40:08:f9:
                    99:b5:d9:9c:93:cd:cd:91:5b:01:88:15:0d:d1:82:
                    a4:7e:40:35:a6:ca:14:3f:f3:92:50:73:9a:30:b8:
                    9e:aa:b9:7f:32:df:68:61:6b:c5:21:69:f0:72:0b:
                    e7:86:b1:57:5c:b1:ad:a5:0a:3a:ea:e9:db:7e:d2:
                    33:5a:58:8c:4a:8d:6c:6e:7c:e0:01:75:c3:64:04:
                    d0:99:ce:ce:a8:a9:c1:23:60:92:ea:c3:3d:bf:78:
                    01:53:cd:53:a9:f0:5d:88:22:9c:fc:d6:1a:28:39:
                    12:54:10:9d:df:bf:9b:69:b6:53:75:0b:4e:e4:ec:
                    d8:cb:84:b1:2f:7c:f2:1d:68:2c:91:8c:5c:3d:88:
                    6b:41:e6:25:3e:78:67:2d:d4:a8:12:af:09:45:26:
                    f5:eb:c2:2e:be:43:b3:ab:16:fb:67:21:76:17:e3:
                    fe:be:b0:ab:18:ea:17:9d:25:bc:1d:a2:c6:a4:6e:
                    88:e5:56:c1:a9:22:3f:42:92:98:2b:a9:f8:9a:76:
                    c6:a6:c2:ea:fb:e8:f8:17:fe:9c:80:22:6e:80:f8:
                    bc:28:2e:f4:aa:6d:f7:d2:3a:24:db:52:cf:2a:4d:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:D6:06:9C:F9:E5:95:CF:31:6C:20:51:B4:45:5C:CF:FA:F6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0473a7e2-0c49-3bad-a691-955fd2f52894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:69:b8:21:f1:35:a8:d5:46:e7:19:19:82:47:e2:da:af:c7:
         b8:a7:76:3e:1c:a7:ca:8d:6a:dd:b8:64:29:ad:e5:cc:f5:be:
         68:55:ce:c8:ac:69:b5:0b:a5:36:30:76:2e:c4:c3:2d:68:a9:
         d2:e8:62:8a:2e:9d:9c:72:20:80:9e:6f:67:7c:cb:c0:33:4d:
         49:a2:f0:3b:a9:5e:c4:0d:5d:dd:92:42:91:ad:a4:35:67:5b:
         6c:73:d0:61:e7:0b:dd:5d:54:7b:97:64:f9:d4:4d:94:34:b7:
         95:62:57:93:cf:db:6a:07:e9:7e:ee:93:68:b3:be:e2:b8:39:
         17:b0:4e:10:cc:1a:bb:9f:ec:57:b0:71:92:07:34:8b:83:43:
         93:f7:4a:37:4a:bc:21:8a:a8:27:17:3f:76:42:d3:95:be:ff:
         22:21:ad:c8:51:7c:cc:65:32:14:4c:13:a0:1b:2e:e5:38:fe:
         cc:04:24:c6:44:1d:d5:e2:2d:01:27:aa:e8:5e:40:3f:cf:52:
         e8:07:7e:c2:c7:0f:24:88:ab:95:1d:a2:2f:64:de:b6:fc:70:
         98:23:aa:ad:88:3c:34:b9:5a:c0:1c:55:90:86:dc:a1:51:ff:
         79:d6:6d:66:6f:c7:ea:8c:4a:18:9c:35:e2:2d:67:54:03:db:
         a8:71:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:42:01 2026 by rpki-client