Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ed801ed-4d9f-3300-bf68-3cf7d6cbc278.roa
File:                     5ed801ed-4d9f-3300-bf68-3cf7d6cbc278.roa (raw, json)
Hash identifier:          Z3TNiDejyqYXVvDnBUqmxEQ3QWxLNqoSnJXR/GL/K6g=
Subject key identifier:   6D:C4:A8:36:A7:21:31:8B:15:82:98:5F:D9:5C:BD:5B:32:F8:17:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC485C87CA35682CC711A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ed801ed-4d9f-3300-bf68-3cf7d6cbc278.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396606
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:85:c8:7c:a3:56:82:cc:71:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=8339db3e-f6ab-4951-ab3c-0fafd4317f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:54:78:1c:e2:6e:85:f6:c4:e8:25:10:05:
                    d9:45:6a:2e:9a:30:bc:3a:73:cb:5d:4f:42:75:66:
                    cc:a6:49:06:a3:c8:67:47:7c:13:c0:b2:45:e8:c9:
                    49:8b:09:3a:64:dc:69:ea:64:78:d7:cb:a7:c7:9b:
                    21:02:69:0e:bc:46:b6:46:16:8c:52:29:70:1b:f8:
                    61:dd:b9:67:80:18:1b:e5:d7:43:ca:b1:2f:24:1f:
                    e8:b9:a7:46:f8:b2:21:29:e4:85:51:49:b9:54:4a:
                    1a:41:dd:d0:5d:37:18:c0:96:50:4a:3b:ce:25:9e:
                    7f:50:48:c2:64:86:48:18:d2:fa:d2:52:df:9b:70:
                    fa:14:cc:f8:ce:94:e7:7a:22:53:74:ad:62:48:d1:
                    64:f6:8a:67:da:10:f5:74:bb:7b:38:95:43:75:d5:
                    8e:59:bb:71:48:51:6a:df:91:b9:8d:81:9b:c7:7f:
                    f4:34:a7:04:ad:0a:5b:66:c5:fd:14:ae:7e:31:72:
                    bd:04:7e:3f:78:55:ba:8e:26:f0:ca:6f:36:9c:88:
                    9c:a5:67:a5:a4:bd:07:e3:e4:5b:e0:57:b4:e1:b1:
                    9e:77:d1:15:77:05:4f:3b:0f:1d:78:25:d0:81:4d:
                    01:fa:ac:7c:b2:f4:49:a1:0c:91:71:bc:33:46:09:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:A8:36:A7:21:31:8B:15:82:98:5F:D9:5C:BD:5B:32:F8:17:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ed801ed-4d9f-3300-bf68-3cf7d6cbc278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:38:59:a3:97:6b:3d:e3:6b:89:25:46:fe:9a:cf:65:09:
         12:50:51:1d:0b:4d:e0:d9:36:63:29:dc:34:0b:c5:a0:5a:49:
         a5:2f:4a:8d:f6:c0:3b:9a:fd:81:37:59:89:05:a6:56:3f:b6:
         49:2f:9c:e7:02:07:fc:f4:24:91:9a:e4:e7:29:ee:01:b8:52:
         b0:35:57:01:fd:b9:33:58:2b:ca:ba:c2:ca:13:78:e9:87:ff:
         a1:71:1f:8e:e9:49:66:19:a4:59:71:d0:f4:fe:0a:c3:94:a3:
         ac:1b:79:f3:02:64:da:93:9d:37:ff:b3:82:c9:6b:f1:ac:cd:
         31:c1:58:13:50:93:9e:0f:d6:51:ed:62:69:46:a3:96:b4:74:
         cc:1c:20:c5:ab:94:99:93:2f:dc:5e:62:73:5c:f2:0c:0e:65:
         9e:51:0e:05:86:d9:5a:e9:96:c6:d7:c5:34:17:06:7e:44:43:
         12:58:f4:12:fd:68:eb:f7:2a:79:6b:c1:02:b1:30:f4:3b:29:
         42:16:08:7a:73:f7:e2:4b:3a:c9:74:22:a7:6e:1c:46:2e:7f:
         3b:ce:8c:39:94:c1:db:d7:ac:cf:c0:4f:05:be:ef:49:60:5b:
         c9:8b:ab:75:b2:6f:b8:fb:b5:29:b2:1e:52:03:8b:27:92:80:
         3d:0b:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:38:06 2026 by rpki-client