Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9764ca78-92ba-3c3a-82c5-0174df84907c.roa
File:                     9764ca78-92ba-3c3a-82c5-0174df84907c.roa (raw, json)
Hash identifier:          9vDW/HFakkDK4PmYkNVIRfSs6GENQ/agiBraLXAyzec=
Subject key identifier:   F0:06:1F:95:5F:BF:A5:1F:53:E2:71:A1:42:B4:29:C1:2B:4B:28:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC484E788AC854ECD40B600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9764ca78-92ba-3c3a-82c5-0174df84907c.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396581
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:84:e7:88:ac:85:4e:cd:40:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=5ebb163a-2524-475a-a7e4-41d9636440c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:9a:12:2b:20:75:d0:25:ff:c7:a5:0f:ad:
                    38:02:e3:ad:e4:31:f1:af:af:0f:d6:20:40:cb:ab:
                    56:91:3e:4d:af:a1:30:99:46:ec:e9:bd:a1:8c:01:
                    50:e3:60:37:f2:c7:71:44:e1:4f:ed:90:31:77:dc:
                    15:79:f5:6f:00:37:ee:50:4a:34:c8:05:0e:31:f9:
                    c5:2d:5f:58:d3:11:83:7a:a2:53:a8:cc:1b:8a:8c:
                    20:44:f1:de:3b:08:fc:f7:c8:ca:b2:70:59:f8:78:
                    dd:94:b7:e2:6e:3d:80:f8:22:29:f3:20:11:6d:78:
                    cd:19:61:86:6c:81:85:3b:69:1e:e7:60:a2:88:35:
                    7c:ba:2f:75:50:e1:49:3b:c3:46:32:f1:14:45:ab:
                    86:71:92:83:10:68:2f:01:05:0c:b8:e6:85:3f:12:
                    da:e5:d9:31:36:f4:25:57:a5:7a:50:d4:da:0a:20:
                    64:0f:6d:54:1e:f3:8e:df:e1:b7:b9:e1:5f:63:b4:
                    55:1b:89:74:7f:ca:27:d2:e6:43:cb:d6:6a:5e:0f:
                    77:16:ec:72:5d:6c:d7:27:ad:81:c4:41:c6:26:75:
                    00:b2:c4:1b:a8:b6:e3:7b:e3:52:27:4a:0f:9e:5d:
                    c6:81:33:96:1a:80:d9:34:3e:cc:29:28:95:c6:a2:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:1F:95:5F:BF:A5:1F:53:E2:71:A1:42:B4:29:C1:2B:4B:28:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9764ca78-92ba-3c3a-82c5-0174df84907c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:36:66:b0:91:c8:d3:12:d7:a4:19:9b:49:4c:9a:9e:61:1f:
         3d:e2:dc:b6:02:52:8a:dd:68:38:32:5b:a8:a3:39:1d:78:97:
         d8:06:53:48:48:95:c5:94:ab:22:e8:06:b5:52:54:a0:74:0e:
         62:0e:59:af:32:03:96:1c:fa:ee:87:e0:b8:29:b9:0f:5c:88:
         d1:30:c5:de:9f:b3:e0:a3:0e:25:10:59:4b:8e:7a:f1:40:ff:
         b3:e5:4c:88:44:2e:83:4f:d1:c8:6c:1b:6f:1a:2b:a6:62:9e:
         bf:29:0d:30:02:2c:69:ae:77:f7:13:f6:75:57:bf:e9:8e:b9:
         0a:e6:39:0c:0f:7e:11:0b:e5:4f:5a:27:95:f5:8c:a4:7f:75:
         4e:ba:2e:4b:aa:18:84:09:98:01:68:e6:82:41:bf:ed:8a:38:
         67:20:82:f4:ab:56:e8:c1:42:b4:06:c4:e6:cc:ce:68:2d:b5:
         2a:b1:f1:74:69:d3:93:18:a6:82:30:70:07:f7:11:fc:e0:c3:
         7c:69:81:cf:39:dc:2e:f7:5f:c1:fe:a8:2a:ea:12:07:28:1c:
         47:dc:fd:6b:58:a4:42:d0:af:4d:ea:12:04:7b:76:60:dd:a6:
         01:17:39:30:3c:cc:9d:63:5b:81:87:33:16:b6:d1:d9:79:b4:
         22:83:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:39:58 2026 by rpki-client