Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d20302a-0451-3040-add7-69332cd8bc09.roa
File:                     6d20302a-0451-3040-add7-69332cd8bc09.roa (raw, json)
Hash identifier:          pyK+9xiDn8owmGScWJBZfluq/aJ/a3LErpFdHKlzZ2s=
Subject key identifier:   32:37:BB:1D:5C:D6:55:8B:26:79:93:7E:AF:2D:79:7D:AC:76:9D:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E12BC168CE78A6387300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d20302a-0451-3040-add7-69332cd8bc09.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396583
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e1:2b:c1:68:ce:78:a6:38:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2989922e-d494-4881-ba97-1bf6f35f3dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:3f:ec:ab:8e:27:d2:cc:34:9a:a2:83:5b:
                    1e:09:5c:4c:fe:e2:7b:fa:37:3a:81:48:97:81:25:
                    a8:4a:f5:94:07:c1:8a:5a:eb:cf:01:31:71:71:62:
                    78:c3:0a:92:67:b7:cd:66:c3:02:be:ce:2c:23:e6:
                    53:12:be:77:99:88:0a:9c:f7:c2:44:34:b4:82:6f:
                    2e:9d:f4:4c:7e:81:3a:63:14:dd:e8:16:99:8f:87:
                    59:f4:66:cc:1e:d8:14:a6:37:5b:26:92:38:a0:fc:
                    35:c2:e6:18:eb:ee:09:70:eb:4e:b6:39:db:81:08:
                    ea:3b:b2:9c:e7:04:b0:60:db:cf:ef:a1:11:1b:27:
                    e9:c8:ce:64:db:bc:6c:f2:41:6c:53:cc:63:e5:f0:
                    84:a4:bd:5e:d0:c7:8f:d3:f4:c3:86:f5:20:83:f2:
                    4f:48:dd:d8:b2:c7:5d:34:04:ae:36:00:f8:95:a9:
                    8f:a9:9a:cc:d8:95:5a:1f:13:5f:f1:8a:c4:b8:9d:
                    f1:94:7d:a9:f6:35:51:f6:ac:97:ea:c0:71:a0:9a:
                    47:a8:31:bb:f3:f1:5e:4c:db:11:26:bb:11:a4:c5:
                    f7:12:ab:5e:8d:a5:9b:04:1e:06:b5:15:0c:a4:d3:
                    52:c5:cb:23:79:4f:60:b3:ff:c1:d5:a8:d5:5f:20:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:37:BB:1D:5C:D6:55:8B:26:79:93:7E:AF:2D:79:7D:AC:76:9D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d20302a-0451-3040-add7-69332cd8bc09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:20:33:b0:a9:42:d6:08:78:4a:19:52:83:57:68:e8:ef:b9:
         a6:b7:a3:cd:eb:0a:dc:af:22:05:8a:c6:3a:7e:17:a2:1c:76:
         17:04:6c:3a:6b:eb:7f:c9:ef:e3:cd:20:88:fa:b9:c1:dc:b2:
         47:82:01:04:8e:54:2f:8f:78:07:e9:a9:24:02:5f:46:7c:5a:
         23:dd:90:da:7a:a6:e0:c1:c9:c8:43:02:64:b1:f1:03:56:ab:
         36:89:fb:fb:ed:da:29:9e:7a:25:42:01:24:3d:8a:e2:9c:93:
         99:53:1f:74:73:e8:36:82:6e:78:ac:cf:70:c9:3a:43:0a:a5:
         0c:5d:fb:40:e9:13:ce:18:ef:e4:5e:d2:df:da:03:88:c7:d6:
         f2:b0:62:1e:43:18:99:8b:99:98:59:81:ed:01:d1:87:e7:e1:
         c5:aa:01:be:bf:95:ad:a7:ab:d6:55:1c:c8:6e:55:28:f4:cf:
         ba:68:53:83:b1:ad:37:0d:dc:df:ce:f5:2e:2e:c4:03:f8:d5:
         d3:61:28:66:23:66:10:35:6e:6e:65:c7:68:f1:b9:74:d3:8a:
         b4:da:8e:49:b2:a3:e5:d0:4c:55:aa:d1:a3:ce:b0:63:b4:e5:
         23:09:5c:fa:18:d5:bf:a6:cb:67:89:6a:bf:ec:82:00:28:1e:
         1e:ee:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:55:34 2026 by rpki-client