Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da68c4f-42e3-38e8-8643-ca0db339fdc2.roa
File:                     8da68c4f-42e3-38e8-8643-ca0db339fdc2.roa (raw, json)
Hash identifier:          w1SjPp7424B3wIY0iHxRRu6JLZ5lSaiW04HK6RsLLcI=
Subject key identifier:   2B:4B:73:3A:DA:36:1F:59:A7:CE:4C:E4:72:59:90:A7:A1:7E:ED:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9F1B25621EA2E7D569E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da68c4f-42e3-38e8-8643-ca0db339fdc2.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     22547
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f1:b2:56:21:ea:2e:7d:56:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=d3ad320f-f6ba-4085-a9f8-594183393aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:88:1a:f2:82:a0:d7:97:c7:b4:68:74:cc:
                    41:90:b3:5a:94:ef:42:78:77:53:1d:94:dd:85:60:
                    ef:06:b5:a6:53:9c:a4:af:bc:b9:e1:4c:b8:af:62:
                    a8:f5:43:fc:3d:ab:48:c1:83:cb:c5:c7:9f:93:65:
                    f2:20:7d:c9:f1:d7:69:1f:d7:2a:c4:10:80:6e:47:
                    0e:6b:fd:36:9e:42:50:69:8a:a2:b8:9d:9b:73:69:
                    30:91:0a:38:18:ed:e3:40:2a:b0:27:75:9f:e4:0b:
                    97:56:21:13:95:f2:cf:d1:dd:62:79:98:09:86:7a:
                    4b:a3:77:37:02:10:0c:fb:5d:a3:6e:5d:42:bb:ad:
                    e1:f3:63:2a:1e:db:7a:94:dc:3a:f7:e5:43:96:99:
                    aa:12:d1:2d:fa:f2:c9:5b:5a:1b:fa:ff:3b:82:b0:
                    eb:43:87:7c:f3:16:6d:7d:5f:b9:49:54:53:a0:0e:
                    1c:03:22:a9:1f:8b:c8:cc:a9:3e:8c:e8:b6:d2:e8:
                    52:0d:28:c0:6a:9d:64:be:af:5e:d5:f6:49:b3:7a:
                    ad:d7:66:cb:85:a9:cb:79:cf:6e:95:1a:98:31:70:
                    75:7c:49:cb:d4:32:b0:8b:4a:5a:10:6d:a3:b6:e2:
                    61:70:ae:bc:07:30:77:8a:95:88:97:ce:8f:f6:d7:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:73:3A:DA:36:1F:59:A7:CE:4C:E4:72:59:90:A7:A1:7E:ED:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da68c4f-42e3-38e8-8643-ca0db339fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:9d:52:b5:4c:25:b6:f6:53:f1:8e:ef:12:12:15:b9:97:
         5b:60:e1:50:78:4d:85:2d:cb:72:c0:6b:89:83:eb:85:62:93:
         ee:83:dd:4f:e6:f2:1a:d0:2f:13:6b:bb:9e:fc:19:a0:14:dc:
         5b:0d:78:62:21:b7:ae:cd:1d:ef:99:f2:68:ef:a6:76:26:cb:
         57:d7:85:4f:85:d6:38:a1:aa:17:ad:7d:e0:1a:a1:c7:6a:3d:
         a7:82:0b:dd:92:f3:e8:0e:58:a5:d8:af:f5:55:16:fa:ad:03:
         29:e8:d5:53:be:5a:bd:8d:4f:b3:45:db:0a:13:d8:16:c7:88:
         ee:71:5f:b1:71:41:86:3e:32:4c:7e:d4:34:8a:29:ff:d5:11:
         21:ce:60:0f:9a:6a:a4:33:af:4a:27:26:ec:1b:68:cf:f2:15:
         b7:8e:bb:1c:0c:97:95:86:5a:41:52:ff:29:f6:a3:1d:3e:37:
         f5:4d:90:82:b7:02:54:91:e3:54:0b:b0:86:f7:52:b6:36:87:
         a7:1d:33:92:48:d9:13:9e:30:0a:d7:0d:fa:a7:67:0f:49:48:
         f7:7b:a7:27:87:c7:5c:24:d6:86:b4:0d:85:3c:c2:09:37:5e:
         c2:10:f3:99:84:5a:2a:1b:27:5b:a1:f0:61:f9:10:0e:f1:c0:
         98:73:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:17 2026 by rpki-client