Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5665a3e7-eb91-344e-9223-c2dfe8b4b73e.roa
File:                     5665a3e7-eb91-344e-9223-c2dfe8b4b73e.roa (raw, json)
Hash identifier:          4S3c9gvD3q37qnLzk4FvS/E4tRRU0RYqOb7na13UfjQ=
Subject key identifier:   6F:01:A2:48:BF:5D:4A:A4:9B:5B:F1:B1:A0:C6:43:2E:61:8E:23:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9EB180AA6FD699C10B840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5665a3e7-eb91-344e-9223-c2dfe8b4b73e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396593
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:eb:18:0a:a6:fd:69:9c:10:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=9f46f0cb-ff1a-43fd-a420-2d5fd004816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c5:66:ee:f3:70:fb:75:85:52:0a:70:50:4c:
                    7d:09:29:cc:f3:4a:c8:0b:91:4d:05:61:ea:d4:b9:
                    75:90:ad:64:5d:7d:c2:1f:ab:82:38:eb:0c:fa:b7:
                    a4:64:ff:92:40:2f:db:fd:a4:46:89:b4:ae:a9:eb:
                    87:20:48:1a:e1:ab:35:fe:b1:f4:67:2d:fc:fc:04:
                    6f:ac:78:75:54:fe:0f:18:76:74:8e:d8:5b:73:49:
                    a8:a7:d3:e2:00:76:8f:58:63:e9:b4:99:a7:96:ac:
                    db:f2:10:c6:72:f4:9e:24:d7:ba:30:67:0e:fb:74:
                    dc:81:da:d8:d1:28:d8:17:ba:9c:28:25:6c:78:42:
                    47:89:d5:98:0f:56:89:87:6d:c6:42:32:1e:43:ef:
                    f0:22:e5:1d:ac:0e:53:62:92:81:db:23:55:a2:99:
                    9b:79:fc:4f:5f:43:d2:2d:81:20:71:cc:2f:76:2d:
                    a5:ae:51:a4:76:2c:a8:fe:39:62:83:13:ca:c1:d0:
                    bc:83:a4:b9:c5:37:8e:81:92:a3:42:59:1f:d8:2d:
                    8d:1a:1c:bd:2b:30:79:fa:9a:ce:ed:43:78:19:37:
                    c3:6e:58:d1:c8:5a:e6:fc:a0:40:91:78:52:56:34:
                    0a:4f:78:a6:1e:1a:5d:d0:d2:ab:70:d5:3c:01:95:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:A2:48:BF:5D:4A:A4:9B:5B:F1:B1:A0:C6:43:2E:61:8E:23:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5665a3e7-eb91-344e-9223-c2dfe8b4b73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:0a:c1:e1:f3:7c:ba:e7:e9:35:7e:3c:81:d0:1d:c8:64:
         77:5b:b4:79:7f:36:e0:5e:04:a3:1b:76:b4:6e:ff:37:58:fd:
         f6:ce:b3:81:17:5e:65:51:f7:19:0e:cd:d8:d0:b4:e0:c4:46:
         e2:51:7a:7c:61:21:c0:d4:9d:71:b5:e2:35:1c:50:13:e9:06:
         96:4e:a7:b5:c8:fb:7d:ac:cc:ee:a8:a1:3e:bd:f6:6a:db:47:
         9e:6e:e2:fb:07:13:38:97:da:bf:6b:0d:27:c9:f9:9d:af:24:
         d7:6d:14:a3:85:41:e7:30:7b:9a:78:b2:ae:c9:c3:f8:63:cb:
         ed:b0:6b:43:46:f8:47:42:4c:7e:c7:ef:b0:98:88:a4:e1:b8:
         75:f4:02:7a:98:a9:c4:7a:4c:74:16:19:10:47:22:1d:3c:a4:
         69:e5:a5:17:d7:a2:be:3e:85:57:f6:07:90:c9:09:f7:d4:1c:
         15:5c:d5:6c:d9:54:89:e5:93:35:bc:98:cf:d7:5f:ae:63:89:
         cc:7e:62:7f:87:f0:16:fb:ca:c6:8c:d8:02:47:0a:85:6c:5f:
         e7:42:eb:e7:cf:29:dc:29:b1:2a:0a:89:d4:77:7d:38:df:a7:
         9b:6b:24:59:00:cc:ed:cc:06:a9:c5:93:ef:b3:e2:1b:b3:5f:
         4d:9e:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:10 2026 by rpki-client