Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e62dfaf-287a-3523-8189-c0b2e33a64c9.roa
File:                     8e62dfaf-287a-3523-8189-c0b2e33a64c9.roa (raw, json)
Hash identifier:          AH2YAyZaeITpiuL6LknSjAyTHh9qaMnx8IEH5XHe23c=
Subject key identifier:   31:1F:DF:00:BE:41:3A:4D:C4:89:20:49:E0:14:90:FA:B1:DC:55:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F5607300C4C4E78F70780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e62dfaf-287a-3523-8189-c0b2e33a64c9.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396604
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:56:07:30:0c:4c:4e:78:f7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=525a374e-fda5-4a15-94a0-06a2047dd49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:00:b3:3f:fb:ff:b2:ff:7f:48:73:2d:b2:
                    66:6e:e2:e3:4d:fd:c0:12:82:10:31:f8:0f:88:57:
                    e4:28:f0:27:7a:07:26:d9:ad:3a:91:d5:e1:bf:54:
                    09:3f:79:49:bf:e5:72:b2:ee:8a:ed:0b:59:9e:83:
                    85:b3:95:0e:d9:3d:64:e1:f1:c3:04:5b:ac:bd:6a:
                    3b:97:a4:bc:82:ab:00:05:1c:11:6b:ff:13:f6:33:
                    31:69:55:ac:4e:3b:b4:63:e3:ea:85:5a:cf:3b:d3:
                    ad:93:2e:6b:bd:62:ee:57:a1:50:54:05:84:35:73:
                    2b:ca:5e:91:0e:8e:55:be:de:5e:ae:fc:d8:2d:89:
                    5d:db:2e:20:dd:8c:c8:83:b3:dd:70:e3:27:c0:41:
                    70:87:05:6c:08:43:6d:e8:f7:25:02:b3:ce:d0:99:
                    be:2c:49:38:91:36:fa:54:25:13:64:34:71:b0:15:
                    1d:9d:21:d7:44:6a:1a:b4:cb:d0:66:44:fa:a7:17:
                    74:9e:8e:93:50:63:f7:52:1d:1d:a6:67:e7:e9:d5:
                    7f:e4:5b:1b:5f:1c:fe:33:e6:b4:25:4a:da:b7:66:
                    20:d8:dc:8b:de:b1:af:7d:b0:03:77:40:91:14:d9:
                    9d:81:ca:b6:f5:d4:21:6c:0f:20:d5:a9:af:00:cd:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:DF:00:BE:41:3A:4D:C4:89:20:49:E0:14:90:FA:B1:DC:55:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e62dfaf-287a-3523-8189-c0b2e33a64c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:68:0e:13:28:2e:e9:12:e4:19:cc:bd:7c:3f:98:81:36:
         62:dc:ed:b4:4f:87:42:db:d4:78:f7:ba:68:aa:e6:b1:a1:f9:
         31:f5:5e:e3:88:38:fa:87:c5:95:9f:ca:d9:c7:ca:a3:56:d5:
         a3:b4:2a:c9:e4:32:93:bb:37:58:06:75:8e:98:ad:cd:dd:37:
         56:89:3a:77:d8:6f:c8:a1:e2:9e:1e:d4:d0:ba:b0:26:ab:03:
         20:33:0e:6c:ab:93:98:c2:fb:4a:af:c7:5b:d4:8a:bd:26:28:
         02:b6:d3:73:ec:1d:71:b1:70:44:9d:8f:14:17:78:72:c2:5a:
         bd:77:c6:0b:63:81:4f:ac:d4:99:e5:2a:4b:24:1e:6b:b8:08:
         45:fc:b6:50:90:26:0e:d2:4e:49:d8:a6:e3:fa:60:6b:cf:ed:
         be:b1:88:5e:f3:09:6c:59:4d:2d:9e:7d:3d:0d:97:af:c6:89:
         62:37:b9:64:8d:13:f6:83:0a:7b:fa:3d:df:ad:7e:c8:92:a8:
         1e:08:d4:d9:66:b9:8e:af:6c:c0:51:83:7f:e9:d4:6d:30:28:
         6e:28:85:e3:9b:34:f0:b5:cc:99:18:97:01:03:9a:8c:4c:3a:
         cd:90:c4:83:9d:f0:6c:a4:4f:a6:d4:c3:9f:aa:d5:c9:73:78:
         81:cb:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:53:18 2026 by rpki-client