Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f53488-a2eb-332b-9e0a-450bf1609f5c.roa
File:                     26f53488-a2eb-332b-9e0a-450bf1609f5c.roa (raw, json)
Hash identifier:          rV42Ve4QuvMYMi/IeAHvn2ID9BlrWQkB0RORu4/q1l4=
Subject key identifier:   DF:44:BD:CC:D2:88:90:BF:1D:20:47:0E:88:2A:4B:4D:67:0C:A9:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC4845D478F2A3AA15E01C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f53488-a2eb-332b-9e0a-450bf1609f5c.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396826
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:84:5d:47:8f:2a:3a:a1:5e:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=e7c390af-1e5c-46cf-80d1-15a3bb016108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a5:db:c5:86:93:34:1f:2b:bf:35:2c:a5:cd:
                    1b:05:89:00:c1:88:02:3a:47:62:07:17:77:fc:88:
                    0a:2a:73:e9:4d:1e:3c:60:37:66:97:a8:15:e3:ad:
                    3f:80:95:60:77:10:5f:32:8f:9b:6e:d0:8b:5c:93:
                    11:5d:e8:29:08:c7:17:83:2d:40:e2:26:f5:9a:a8:
                    b8:d9:02:c9:45:a2:80:71:91:eb:03:d1:5b:09:8c:
                    00:7b:19:2d:af:ef:36:da:56:18:85:46:6f:18:1c:
                    7a:d6:c6:97:19:a6:8b:b6:18:6b:dd:71:a9:0b:c5:
                    61:fd:13:40:f0:07:21:7e:ab:f7:4b:83:ec:b4:53:
                    ba:28:f6:51:93:08:2b:4e:ea:06:b3:73:e2:18:1a:
                    e5:fa:9a:be:d5:a0:8e:4c:f8:19:f0:c4:db:0b:d7:
                    1f:a5:da:30:73:aa:34:c4:a2:49:c5:f3:6f:bb:41:
                    c8:d7:9a:ff:72:90:73:8f:1c:30:ce:9f:35:76:93:
                    b5:d1:1e:c8:f7:76:86:cd:ab:4b:2f:d0:1e:07:3b:
                    cf:16:82:4b:fc:0d:27:10:01:68:6c:d5:7f:1f:4e:
                    61:13:54:10:83:5c:91:c5:a9:26:27:32:25:b4:7a:
                    52:84:0b:1d:17:fe:bb:47:52:4d:f6:79:3e:f0:5b:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:BD:CC:D2:88:90:BF:1D:20:47:0E:88:2A:4B:4D:67:0C:A9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f53488-a2eb-332b-9e0a-450bf1609f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:ff:34:4b:87:6e:33:50:d8:ca:9b:a7:98:37:1e:e1:23:
         0e:ef:6f:94:67:47:3a:93:d8:bb:ab:e2:48:38:62:e5:b3:71:
         c4:73:9f:31:9a:e3:65:52:04:5c:22:ac:19:f7:80:9a:40:c7:
         a1:84:48:79:ca:94:9b:d8:0a:ac:1d:8b:24:01:fd:9f:e6:5b:
         6c:04:11:47:32:25:d2:68:8a:85:3f:3a:0a:a5:89:33:fd:e9:
         58:40:d0:6a:9c:ac:af:73:f8:94:55:de:b1:16:83:52:1b:25:
         8e:fb:c6:12:41:44:c3:54:31:b0:6b:7e:97:89:25:28:20:94:
         d9:bc:75:c6:01:79:b0:a4:22:c4:3a:cf:af:6a:18:b6:dd:f5:
         54:4d:68:c4:ba:9a:91:ed:9c:c9:26:7f:02:b6:ac:de:dc:93:
         bd:6c:96:7d:80:9b:88:c7:3a:80:bb:9d:f3:da:72:8a:2e:7e:
         8c:2c:08:14:d5:cc:67:ea:7a:f3:2c:9c:97:15:5a:3e:8b:2a:
         73:82:5b:52:27:3c:92:2d:84:af:89:3e:03:96:86:3e:fe:c3:
         ee:f7:b3:fa:47:e2:bc:9e:54:1e:24:0f:20:20:ab:84:cf:b1:
         cf:f2:9c:9c:a1:9f:61:96:fd:5f:ac:36:40:c9:d9:32:66:4d:
         50:5b:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:39:07 2026 by rpki-client