Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
File:                     d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa (raw, json)
Hash identifier:          hnQsdYXoKbBimf9TIMvs9h4jrKCI63WKWAw7GGsEcR0=
Subject key identifier:   C7:77:C6:DE:8D:BB:E6:D4:FB:38:27:56:8B:3F:A2:E3:D1:A2:8B:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4A974CFDA2E948140D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396576
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4a:97:4c:fd:a2:e9:48:14:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=2cb1e493-a4ea-439b-acf3-3b1a9ab90c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:59:88:68:a8:ef:f7:dd:ed:e0:7a:ec:9c:
                    1a:1c:ea:b9:10:bf:ab:09:bc:2c:15:19:e0:2b:30:
                    ce:fd:6e:8b:f8:bf:78:bc:7e:83:6b:15:49:6b:97:
                    ae:11:4c:c4:d1:ff:37:94:23:fb:eb:54:6a:b9:2a:
                    a6:4f:0d:24:12:a7:89:41:0c:e3:83:ec:dc:7e:e4:
                    ac:f4:43:87:07:3d:43:9d:56:1e:ac:75:2e:6a:08:
                    24:f9:a1:18:43:57:be:45:5e:6b:b3:e3:9c:37:9a:
                    c3:59:6b:ee:a3:ae:4d:2f:15:00:7b:76:13:44:5e:
                    96:c6:66:2e:61:ba:6c:0b:ff:50:f4:40:fb:44:46:
                    0c:45:c3:84:8b:a7:29:c6:6a:05:67:96:e2:c2:15:
                    8d:34:5b:85:41:4c:2e:fc:94:72:ce:56:2e:62:a7:
                    41:2e:3d:07:50:f1:32:74:48:aa:33:3b:35:6c:b2:
                    2f:60:f2:25:f0:82:92:17:2b:ec:e1:87:47:c1:8d:
                    42:81:f5:ae:9f:0d:b6:78:a9:48:8a:31:07:1a:2c:
                    8c:a3:40:8d:49:d3:03:12:85:42:9f:e2:ed:4e:3e:
                    08:d8:3d:7c:dd:35:63:4a:d9:a0:cb:99:cc:d7:7e:
                    00:55:26:c8:b7:f3:11:f7:a9:6d:17:da:db:86:2f:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:77:C6:DE:8D:BB:E6:D4:FB:38:27:56:8B:3F:A2:E3:D1:A2:8B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:c0:f7:1b:65:ff:89:45:e8:57:8b:6b:71:27:c8:08:49:
         03:30:90:87:a9:5e:e2:e4:99:a0:6a:05:ed:28:8c:3f:b4:44:
         fb:17:bd:fb:86:d5:6e:eb:7a:56:e4:17:b8:c8:26:f1:b6:f7:
         6a:75:48:fa:50:05:a4:c8:e4:bb:6c:66:af:8b:f2:41:03:3a:
         e2:dd:27:0a:61:26:77:0d:b9:f8:19:ae:3f:f6:d9:bf:48:5f:
         8d:4f:d7:f1:f0:bc:9c:9b:d5:f9:46:3e:05:39:7a:1a:ec:66:
         41:85:ef:cf:37:82:c2:56:bb:2f:28:e4:c3:cb:ea:94:d3:0d:
         93:c4:27:7a:83:53:50:0b:9e:4a:51:e8:89:9e:b3:80:55:23:
         1d:15:ac:ec:1c:84:40:7f:7c:73:2c:c6:92:9e:6f:53:36:de:
         bd:42:a3:de:a8:e5:4a:71:81:68:50:36:cf:5b:7c:84:d9:34:
         cc:07:05:f0:d6:d5:a9:84:72:e3:99:0a:82:5a:e9:d8:ed:ae:
         02:8d:5b:52:fb:1e:7e:7c:a9:c5:48:8f:23:56:01:53:ac:fb:
         28:d4:31:cb:fb:03:c6:6b:02:fe:b8:42:a7:dc:dd:fa:f5:7a:
         a3:45:ac:8d:b2:f9:8c:b1:ae:bf:42:18:2d:7a:29:a4:95:44:
         f0:00:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:01 2026 by rpki-client