Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c26566d-017a-39a0-98bf-85cd7def210b.roa
File:                     1c26566d-017a-39a0-98bf-85cd7def210b.roa (raw, json)
Hash identifier:          0ZcOi/IUnL0IofLqg4dAOuExQZqqS+60HkXf+gJPkPI=
Subject key identifier:   E2:AF:57:32:C0:EF:AC:2D:1D:D7:D5:11:6A:E3:2C:47:F8:94:A3:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC482567E2163965EAF94C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c26566d-017a-39a0-98bf-85cd7def210b.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396589
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:82:56:7e:21:63:96:5e:af:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=2c90e87f-7170-4de7-b482-ca525586c1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:57:28:48:e4:80:06:3c:fb:ff:65:70:bf:
                    a8:a1:19:d8:54:6f:c0:db:4d:b3:97:23:52:b2:6f:
                    98:f0:93:5b:0e:9d:32:96:00:45:c4:13:f8:92:43:
                    64:66:f2:b4:f0:1b:a1:28:3c:5f:47:ce:a8:a8:f0:
                    3a:85:24:1b:1a:32:e5:04:6c:c9:22:4a:40:99:1a:
                    ec:4e:1c:5a:65:fa:a7:b6:f0:3f:82:7d:28:82:7e:
                    bf:ce:d0:3f:b5:26:ca:46:7c:3e:ad:ac:bf:7e:de:
                    95:69:07:ee:73:bf:de:b6:8c:b7:f5:e7:72:b8:63:
                    e9:a3:dc:ac:7c:f3:df:58:a8:29:8d:30:26:c2:48:
                    1d:79:6d:cd:59:1d:49:d5:6c:de:3d:dc:6a:b9:85:
                    1d:87:4d:58:4a:fe:e5:ed:52:30:d2:6d:22:08:ad:
                    08:e7:81:18:61:b7:93:a3:31:2e:2a:69:ef:84:0a:
                    7d:c3:bc:ac:47:3e:ad:f9:de:3d:44:d1:b3:53:0c:
                    25:e2:fa:53:e9:8f:c8:3c:41:4c:6f:01:ec:33:dd:
                    2f:d9:61:e9:72:63:74:71:41:e7:53:b2:d2:01:30:
                    0e:0a:aa:12:f2:0f:37:8c:8d:87:1d:a8:5c:88:84:
                    8e:0f:f2:c7:e2:4f:62:fc:72:8d:cc:38:93:06:91:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:57:32:C0:EF:AC:2D:1D:D7:D5:11:6A:E3:2C:47:F8:94:A3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c26566d-017a-39a0-98bf-85cd7def210b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:46:67:d4:17:97:87:59:53:01:93:75:77:d5:87:78:73:
         26:bc:a8:9a:36:af:db:65:11:e0:27:b8:62:d1:3f:69:77:0b:
         59:38:b8:a7:95:dd:39:04:25:f0:8f:e4:0e:5f:05:d0:89:31:
         2d:a1:47:2e:8f:26:65:17:02:b0:8b:63:ef:05:d7:fe:48:9e:
         c6:c9:b6:c5:cf:0b:cf:d7:fc:be:13:3b:d5:99:d8:79:bc:ec:
         ff:ed:53:bb:6f:45:bf:d6:cb:54:fc:14:48:85:fc:5d:1a:31:
         37:4e:56:8d:7b:7c:0d:55:a0:04:37:03:2c:ea:d8:1a:e6:42:
         bc:a9:60:03:72:a0:dc:20:cd:ec:ee:f6:a7:b6:bf:1f:46:b8:
         9b:1d:2c:e2:ec:37:c7:5e:5c:2f:41:6f:bf:ad:10:3b:07:eb:
         60:19:b1:31:40:e7:12:14:29:81:28:d4:74:b5:e9:7e:0c:1d:
         d9:de:9d:db:44:a8:09:38:01:c2:68:ad:59:9f:e8:54:c6:68:
         57:ae:1a:21:37:6f:4b:38:e4:ec:65:db:77:c8:7d:0e:f8:ad:
         aa:ec:d5:76:4d:54:82:21:d2:04:85:9c:8e:1f:a0:74:57:5a:
         e3:2e:e1:00:10:fb:0f:b6:0b:da:9e:29:79:6a:07:be:25:f7:
         25:2d:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:41:03 2026 by rpki-client