Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cbca12-09ad-370e-991c-85ac72545daf.roa
File:                     c2cbca12-09ad-370e-991c-85ac72545daf.roa (raw, json)
Hash identifier:          fSsXGM7jzwNE0JZLbeeAUEvg3JjIAnSiPqKFde7uKC8=
Subject key identifier:   5E:0A:F9:8D:9E:9E:F6:3D:29:D6:A4:8A:AE:F3:D3:8B:76:8E:55:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E534F41EF3FFB109328C31E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cbca12-09ad-370e-991c-85ac72545daf.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     396599
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:41:ef:3f:fb:10:93:28:c3:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=745f4818-72d9-4ede-aee0-4df857a5a71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:98:e6:59:91:70:3b:1b:b4:87:ba:96:95:
                    16:57:69:f7:35:90:80:79:45:89:b9:fa:ed:32:90:
                    fb:1d:5f:b3:7c:5f:4d:c7:71:de:5d:95:ed:5a:03:
                    7d:a2:53:12:a4:1b:93:59:ef:12:20:a6:da:b4:61:
                    c2:52:58:f0:1d:69:c3:1c:97:3e:fa:ab:3b:53:18:
                    68:03:86:3d:13:ac:e3:7b:a5:a8:68:ee:1b:10:7d:
                    6b:38:b1:c3:b7:1a:81:3a:50:56:ae:c5:81:f5:30:
                    84:46:32:42:80:d5:b6:74:6f:06:4f:c7:0a:0d:1a:
                    07:85:d7:4e:40:2e:83:66:2f:d5:c7:46:85:6d:88:
                    e3:f9:63:f6:99:17:dd:27:36:54:ce:ad:ff:8d:09:
                    a0:68:e7:ed:12:f5:1b:88:b3:8f:fa:f5:e9:2c:e6:
                    e1:ca:2f:45:dc:b9:78:f7:ab:99:9b:40:7a:13:7e:
                    24:09:fc:26:74:a6:52:a1:64:4e:98:27:2d:7f:c4:
                    8b:1e:5d:5a:33:14:ef:61:63:5c:38:c2:f3:b4:e9:
                    3e:1b:a4:f0:8b:67:43:e8:c1:b1:cb:8e:fa:3d:6c:
                    f7:b0:27:4b:6d:68:1d:fb:5b:bd:9d:9a:e4:5c:b9:
                    a2:1b:d7:5c:38:64:ee:03:f6:2b:e3:d3:9d:e1:b0:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:F9:8D:9E:9E:F6:3D:29:D6:A4:8A:AE:F3:D3:8B:76:8E:55:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cbca12-09ad-370e-991c-85ac72545daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:23:70:22:86:f0:b1:b6:83:98:1a:5b:be:52:49:64:68:
         dd:4d:6e:fa:5b:db:c7:ad:bc:e7:b6:13:73:53:39:0f:6a:21:
         ce:38:3a:a1:45:01:b3:eb:cc:ad:e8:70:de:c4:a8:1c:f6:b4:
         0c:63:e1:e2:cc:db:ab:1d:b7:e6:b2:a8:7e:2e:90:48:3e:5c:
         1a:27:15:51:a5:9e:a9:9e:a8:a0:25:a4:8a:19:b8:06:0b:1f:
         bd:5b:49:78:6a:45:f3:d7:f4:72:4c:9e:fa:aa:c7:49:96:da:
         69:5e:18:02:f5:da:08:03:b0:d5:1e:90:bc:49:db:76:a8:9b:
         25:81:bf:fb:97:39:2a:4f:50:09:df:c2:98:69:d0:8b:01:bc:
         da:9e:4c:02:16:40:94:16:35:83:3e:4c:51:4d:07:52:96:22:
         e1:cb:84:6b:e7:ae:a5:31:79:87:18:0c:64:c1:07:0d:bb:89:
         63:14:c7:d4:21:45:53:40:fe:d2:02:e6:55:9b:dd:cc:c2:00:
         bf:e8:f5:a7:a3:59:d2:bf:b3:78:57:7f:82:ed:e9:79:35:eb:
         e0:b5:7e:a5:15:cc:af:e9:67:7f:d6:6b:11:86:f4:29:b9:15:
         c5:7d:f3:cc:8f:25:d8:e1:9e:c7:b8:f1:df:e5:6c:22:2c:e2:
         80:cd:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:07:58 2026 by rpki-client