Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ab61547-b0d2-3a46-bb7d-8db1a8d205d2.roa
File:                     8ab61547-b0d2-3a46-bb7d-8db1a8d205d2.roa (raw, json)
Hash identifier:          gPbTQ0wgBEDt4o2lEsIUd8rbV7vAIhHu6Apgx/vu62E=
Subject key identifier:   A2:7D:ED:93:34:51:9E:D5:55:19:07:92:6E:9C:CF:E8:A3:A9:F8:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4A6A4B8415BE05E0C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ab61547-b0d2-3a46-bb7d-8db1a8d205d2.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     36627
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4a:6a:4b:84:15:be:05:e0:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=ce142506-7346-4e18-8254-a617041eff64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:80:93:35:32:7b:79:fa:fe:a1:b4:4e:9c:
                    d1:ae:a4:8a:7c:f3:b1:3d:28:f9:3e:0b:fc:ef:c9:
                    ab:8a:ed:60:7d:6c:ae:d5:45:be:f0:98:71:b3:13:
                    d2:09:ac:6e:08:a9:09:3f:75:56:b9:7b:7e:1f:99:
                    14:d3:3f:bd:89:c8:77:18:48:f8:da:20:8d:14:f6:
                    b5:64:56:28:d4:5f:b9:f1:b1:a0:f3:89:2a:87:ad:
                    22:ab:8a:20:4f:0b:1e:aa:72:02:67:dd:01:ce:4b:
                    1c:98:5d:1b:a0:71:c5:d3:7f:62:a3:95:2d:ac:3d:
                    80:f3:a1:1f:10:28:41:9c:6b:de:f3:bc:2c:c2:fb:
                    d7:90:7b:12:ef:c1:6c:0e:d7:61:a4:cc:6e:13:f8:
                    2c:a0:66:8b:b1:df:e0:ba:54:3f:58:e6:97:7a:06:
                    34:ea:38:a9:29:bc:ac:49:90:46:1a:be:ed:bd:9d:
                    10:ab:96:9a:5c:45:18:14:d9:9a:c4:22:7e:b9:18:
                    be:3b:e0:f0:04:81:e9:2a:0c:c1:0b:fe:15:e5:58:
                    c9:55:27:a3:7f:a3:4f:25:84:f5:9b:72:28:1b:a6:
                    d9:23:87:90:59:f2:82:55:0c:00:6d:c0:bb:bd:55:
                    a6:0c:07:26:8d:62:ae:ea:43:76:c1:67:f0:a4:b3:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7D:ED:93:34:51:9E:D5:55:19:07:92:6E:9C:CF:E8:A3:A9:F8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ab61547-b0d2-3a46-bb7d-8db1a8d205d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e9:f1:9b:c0:2b:f1:ad:7a:03:1b:5d:f9:94:78:07:70:62:
         5e:b7:12:73:c7:25:2c:5c:f4:0a:53:d5:d3:55:f0:04:4e:16:
         6b:bf:4c:88:bf:9f:f4:86:c2:9b:a5:c4:22:65:8b:a1:ca:21:
         15:26:bb:08:8d:76:ce:52:e1:91:f0:e0:64:9d:9d:47:8c:79:
         16:33:f6:4d:f1:55:fb:9c:a9:80:7b:6e:5c:82:76:90:d3:7c:
         1c:67:37:43:81:6a:51:77:40:c6:02:e2:fb:e4:38:20:48:33:
         de:5e:ff:a7:f4:5d:8c:8a:33:79:66:5d:8b:72:71:9c:61:80:
         e3:09:16:48:96:66:25:e2:12:d0:be:bc:27:7a:52:ae:b4:45:
         d9:47:41:cc:88:2f:47:9f:bc:c0:e0:d2:9b:31:5d:6c:ac:f4:
         04:26:77:60:1a:14:a0:f4:76:d8:12:2e:7b:0f:d2:31:e6:0e:
         3d:5e:25:eb:d1:fb:7e:7c:79:70:fe:f3:53:9e:49:b7:fb:a7:
         10:37:b6:04:51:55:65:9e:5d:28:3e:c2:f5:66:da:e0:5a:9d:
         d3:4c:a0:20:cd:b0:63:34:5c:8a:a0:16:b6:d7:89:cd:06:86:
         88:92:ce:07:b1:45:85:2d:5d:0f:cc:c1:c4:2d:80:1d:7c:7e:
         6a:10:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:33:22 2026 by rpki-client