Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9123f3dd-8083-3689-b389-ead4618a673e.roa
File:                     9123f3dd-8083-3689-b389-ead4618a673e.roa (raw, json)
Hash identifier:          E7wiDGznSVcbBxhMmVuZX1k1KXy4Vo3TpwlvO8ouqJI=
Subject key identifier:   F5:19:4F:B6:49:20:A5:7F:27:1D:38:B2:D9:DF:2F:41:CA:5F:C6:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E1CD47047F7B219FB9B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9123f3dd-8083-3689-b389-ead4618a673e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     397200
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e1:cd:47:04:7f:7b:21:9f:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=7792c2c5-397d-437b-9598-9da5276a8ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:bc:eb:f3:99:b3:35:5e:2e:37:aa:48:29:
                    ab:bf:ca:7c:2a:91:da:89:fe:32:d8:93:ed:19:01:
                    2f:b8:0a:20:13:e1:b1:09:68:63:5c:1a:dd:27:7f:
                    87:ff:7b:b8:7d:8e:08:99:a8:d5:3a:cc:73:4d:da:
                    00:9b:76:f0:f6:ff:fb:b4:7b:16:d5:fb:1b:60:2e:
                    e1:a3:5a:97:93:fb:31:c4:75:89:67:e9:92:47:f4:
                    0a:18:71:d0:d7:4d:db:e1:6e:ed:fd:0a:b2:29:2e:
                    64:31:e6:98:83:8f:db:6f:70:57:70:d5:85:38:83:
                    94:64:b6:9c:a9:97:a4:c6:47:8c:d2:e2:26:26:05:
                    e6:ba:0e:21:0b:67:7d:4d:54:58:fd:6a:e3:c7:57:
                    94:71:1d:98:30:45:3f:59:6c:18:8c:2a:49:5b:46:
                    a2:8f:52:7c:72:b4:7a:6c:d0:8e:66:bd:cf:e5:c0:
                    1a:00:b3:4c:c5:61:0a:55:ec:28:c4:31:3b:e5:3e:
                    62:9e:12:cf:ce:d3:be:fa:b0:06:9f:5d:0d:5d:de:
                    71:f1:15:2f:dc:f7:d0:75:e0:60:a8:b0:78:b2:aa:
                    aa:d8:6a:3f:e0:fc:58:ed:5f:60:ae:06:8f:fc:84:
                    d7:3e:ba:a9:5f:5f:67:19:17:1e:6c:d5:43:7f:e9:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:4F:B6:49:20:A5:7F:27:1D:38:B2:D9:DF:2F:41:CA:5F:C6:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9123f3dd-8083-3689-b389-ead4618a673e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:22:fc:84:42:e5:67:aa:5c:42:7b:23:21:42:17:14:c4:be:
         ba:99:7e:2f:7b:f7:15:74:25:2b:8b:fa:67:f4:35:9a:f6:e3:
         f3:ed:54:ec:94:ad:3c:e7:99:fd:bb:dd:c4:e8:91:c5:93:bf:
         39:2b:31:61:94:ca:17:9c:e9:d1:da:44:c8:75:ac:e2:d5:fe:
         4d:d7:cb:25:2c:c9:71:44:93:c5:21:22:7d:fb:c8:2a:20:3e:
         a0:c9:1f:75:f5:e1:ff:2d:b5:d5:45:92:78:ed:41:c8:ee:a9:
         7a:1d:47:56:7c:1f:9f:5d:b7:18:64:51:2e:0f:c2:46:87:d2:
         6a:2f:4f:f7:23:c1:fc:cf:6a:ce:29:36:53:05:d3:d2:75:5b:
         9e:4c:25:23:29:c9:a3:70:a4:b5:d7:7a:67:e4:7c:37:6e:17:
         d7:c5:49:c4:86:15:49:64:c6:d2:b5:6e:3b:b6:60:ff:ee:ad:
         23:37:bc:23:33:fa:78:5a:12:4b:bc:a4:9f:51:dc:e3:98:35:
         a0:59:6c:30:19:57:6c:07:3c:b4:5e:2f:e5:53:69:44:9a:55:
         61:ce:e9:ee:94:a0:0c:fb:86:57:ab:ba:12:61:32:35:41:ed:
         b5:62:d2:d0:e1:16:06:a6:7e:95:a6:14:e0:6a:fe:3f:2f:59:
         0a:15:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:42:30 2026 by rpki-client