Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e7d7e7-f26b-3cc0-a119-1ea08a3fc155.roa
File:                     86e7d7e7-f26b-3cc0-a119-1ea08a3fc155.roa (raw, json)
Hash identifier:          6E9c26U75vFZIjDXpMSRoz7wNWlMQJz56d76T22p96A=
Subject key identifier:   DE:CC:05:3F:7D:30:5C:EC:A3:CE:93:01:CE:C1:CB:84:8A:7B:8C:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9DFD5B0493F4F0AA200C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e7d7e7-f26b-3cc0-a119-1ea08a3fc155.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     36622
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:df:d5:b0:49:3f:4f:0a:a2:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=f3ce05b5-f5dd-4a36-b540-35a5b2237377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:42:27:c1:ac:63:be:b7:a2:a0:0d:99:be:
                    06:d3:1f:cc:09:25:39:5a:31:4b:b3:85:93:e8:5f:
                    9f:df:5a:d7:d6:f3:d9:0b:5c:79:e5:ca:c8:13:ed:
                    8f:ca:ce:68:c5:19:84:58:1d:7f:a5:9f:65:62:e5:
                    c9:a0:9e:3e:f5:bd:66:b8:16:68:90:e4:10:3c:1c:
                    23:78:25:59:5f:d6:2c:10:1a:4e:8c:d1:ff:58:a9:
                    03:0c:d3:49:79:65:b3:4f:7a:c5:d4:28:51:86:8e:
                    d8:cd:ba:52:c0:9e:bd:3e:46:fb:d0:74:7e:f9:88:
                    ea:6a:84:4e:05:13:46:45:ec:18:b4:ca:de:9e:13:
                    4a:0e:49:94:bc:6f:30:8c:07:83:46:09:48:c3:54:
                    ea:f5:ed:2c:a0:5f:aa:cf:1b:bb:eb:f4:35:ce:23:
                    29:ed:91:5d:90:dd:30:ab:d4:84:2f:c0:82:1f:08:
                    b2:65:f4:c5:9c:2c:94:ae:2f:a3:2c:61:b1:9a:e6:
                    8b:fa:ea:83:75:f5:1e:6e:d5:be:c8:d1:3e:7f:07:
                    29:48:e8:7b:3e:82:a5:fb:56:2a:27:b3:8b:54:45:
                    a3:e5:3a:d4:77:da:3d:41:d8:d0:87:42:a1:20:e3:
                    b8:c3:a2:ac:41:bf:4f:d9:e3:d8:27:ed:3c:0f:8c:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:05:3F:7D:30:5C:EC:A3:CE:93:01:CE:C1:CB:84:8A:7B:8C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e7d7e7-f26b-3cc0-a119-1ea08a3fc155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:32:e5:a4:2b:bd:e5:0b:40:03:db:13:02:fb:d4:e6:19:58:
         be:11:e1:7a:9d:12:6f:0c:92:44:14:f0:24:06:64:f0:85:17:
         8b:23:1b:b5:2b:58:c3:60:2d:f5:73:58:ef:b2:c5:09:fc:e3:
         b0:a3:45:3f:64:2f:fd:e7:a8:ef:71:5e:d5:ff:f9:96:a8:44:
         98:c8:9e:89:65:e0:f0:a0:46:1c:4a:89:a9:5d:0f:8e:0a:b2:
         26:99:71:2a:f8:a2:ba:3b:b9:6f:c7:f5:94:30:3f:81:9f:79:
         41:ac:eb:0e:54:52:fc:29:40:df:ed:2a:9e:e1:cd:02:e6:3d:
         5e:45:d5:10:c4:39:72:95:75:6c:10:29:4f:83:5f:a9:a9:e6:
         64:cf:b7:dc:15:b1:ed:10:5a:cf:08:b5:a1:da:69:34:eb:a6:
         e6:92:0e:e3:12:d1:38:f3:f7:e6:48:ea:7c:a5:32:1e:f6:75:
         41:e0:c2:cc:b1:8b:ed:f2:b9:ed:63:3c:07:b1:d7:85:a6:62:
         5a:c3:b8:6c:0d:38:fc:9e:5b:79:1f:7e:83:75:d1:04:39:40:
         08:cd:93:71:30:26:b6:1a:20:30:21:b1:75:0a:2e:39:09:7f:
         15:11:78:b5:a9:76:4c:2e:1d:60:84:fd:7b:10:cf:05:80:ed:
         04:f6:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:55:19 2026 by rpki-client