Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a8a628c-0db9-3335-96ab-9a5a23674eff.roa
File:                     2a8a628c-0db9-3335-96ab-9a5a23674eff.roa (raw, json)
Hash identifier:          QQj2k5qmCo9pu9fy4dCz9HTI8Yr/6XE3Njev8uJsNlo=
Subject key identifier:   B9:59:91:29:1D:0F:8D:5F:3B:A1:BF:06:78:89:5E:4A:7A:07:A3:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9DE5C6353AF8688DE2240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a8a628c-0db9-3335-96ab-9a5a23674eff.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     36624
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:de:5c:63:53:af:86:88:de:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=519ae3f0-8439-4d82-96e0-e55d2ccc60a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:3b:01:9d:3e:ef:3e:e9:f7:c8:81:e6:00:
                    20:d6:32:3a:75:0f:84:86:ae:08:72:67:e5:4d:9f:
                    b3:27:0a:6b:37:70:d4:e8:d3:ec:91:98:c7:97:1b:
                    1a:fd:67:48:b2:21:39:ba:b4:c7:6c:11:e5:99:ef:
                    38:2d:86:b3:55:59:67:a2:80:36:13:72:6b:d9:46:
                    a3:d6:0c:e8:42:46:ed:e3:42:b0:96:bd:c6:7e:28:
                    f0:a1:e7:de:a3:d1:44:dc:63:d5:fe:0a:f9:85:3a:
                    23:80:95:f7:45:62:20:0d:de:2d:a7:80:d8:62:cd:
                    d9:07:79:01:2d:a8:73:f2:78:aa:42:85:3b:3d:17:
                    b1:63:68:68:52:c9:26:45:fd:41:e1:8d:ad:1f:f5:
                    29:28:51:35:d5:8d:fa:be:7c:61:1a:4a:8e:79:ac:
                    18:79:1e:d1:e0:5c:b5:51:34:58:a5:b2:fb:23:0e:
                    bd:a7:fb:f2:0b:eb:19:eb:18:e2:8d:0f:f0:d2:d9:
                    0a:d8:f5:df:c3:46:4a:88:10:09:db:59:e2:a4:2b:
                    28:c7:ad:ce:41:95:5e:38:b8:c1:1f:73:03:29:67:
                    f1:30:b6:39:7e:2e:4b:69:de:c2:a7:56:29:f6:05:
                    5f:e7:26:de:1e:39:3e:89:86:e7:c1:e6:56:74:25:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:91:29:1D:0F:8D:5F:3B:A1:BF:06:78:89:5E:4A:7A:07:A3:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a8a628c-0db9-3335-96ab-9a5a23674eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:b3:7c:3a:10:79:14:dc:22:c6:f1:64:c3:07:95:d5:d9:
         0d:55:81:d1:55:98:b2:b8:97:37:04:8e:cb:81:95:b3:35:d2:
         e0:84:7f:a4:ea:37:b7:d1:4d:f9:49:e8:28:89:04:58:60:ab:
         82:3a:50:e2:d2:c1:da:11:ac:b0:23:d7:c9:41:76:94:d4:e4:
         04:e3:18:01:46:0d:df:b0:aa:c1:65:92:19:3d:2d:1c:01:02:
         71:a8:e0:16:db:a4:fe:c1:4c:08:0a:a8:0b:bc:dc:5e:f3:e2:
         b1:7a:8a:3d:da:a7:5e:6a:bd:c9:78:b4:c3:51:43:81:12:3e:
         21:c1:4a:b2:45:3a:e0:c5:2b:0d:36:39:f1:34:15:0b:91:9b:
         e7:6a:75:9c:a1:39:f4:a4:57:79:8f:48:b9:22:f2:8f:88:e5:
         2b:c3:c7:a0:6b:93:73:0d:1f:ab:75:c0:9a:41:c9:a9:a6:27:
         d9:e3:4a:96:f2:af:f6:cb:76:ac:2e:42:ea:e4:69:2b:76:e3:
         8d:e0:55:d3:17:e0:a1:44:36:38:6b:53:b6:cd:83:76:90:25:
         f6:40:78:99:32:bd:48:18:66:68:d1:fe:31:f9:fe:3f:f5:b5:
         bb:dd:65:b9:e6:9b:09:b1:39:fc:23:56:7f:ca:15:a9:35:8e:
         a6:dc:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:53:11 2026 by rpki-client