Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa
File:                     e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa (raw, json)
Hash identifier:          MXvEhZ6eHWoPUKUKHa2OgaXvS9vIv7s2KH+8yUjVAqc=
Subject key identifier:   04:77:8B:50:DB:6B:38:72:00:E0:BF:A2:5F:AA:51:B2:24:2B:0E:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4B63A8720119D91F62A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396596
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4b:63:a8:72:01:19:d9:1f:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=cc7cd108-44b0-44e7-99a1-1af0beebd5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:88:b2:58:0b:7b:01:c5:76:30:c6:ba:cb:
                    ef:b1:b0:aa:34:d8:f8:d8:de:6b:af:bb:20:eb:b8:
                    1c:07:17:e6:55:b9:95:59:12:70:00:da:43:00:78:
                    9b:74:b1:71:75:74:6e:77:e4:53:8e:51:80:20:72:
                    50:78:d1:20:2c:f3:77:f9:68:8d:5a:60:ed:aa:ee:
                    13:5d:87:b5:79:e2:e9:ae:e5:6a:d3:35:e3:db:79:
                    02:be:f4:cc:f1:4b:3f:04:d2:ed:97:de:90:ab:26:
                    bc:89:e1:50:0f:a3:ac:c9:5e:6a:e9:b3:00:09:85:
                    49:d1:e1:88:f1:40:2a:03:64:f0:37:a1:a0:11:7d:
                    b3:55:ba:22:85:3e:ba:e1:fa:fa:e5:d8:68:b0:3f:
                    f5:81:f8:08:ed:82:94:0b:2a:e1:99:ff:a2:19:f9:
                    05:bc:1d:59:df:2a:4d:c0:72:ef:b7:01:40:23:4f:
                    74:37:cd:62:39:87:31:63:89:f1:84:1a:01:e1:37:
                    9f:a6:2f:80:d5:90:84:91:be:e7:14:29:5b:db:ec:
                    01:6f:e2:63:84:4f:5e:ed:ae:60:28:99:67:08:71:
                    65:50:b1:b9:a3:da:c6:43:ea:84:c8:2f:ef:e1:58:
                    e6:b1:35:0f:1b:26:91:79:02:2b:ab:97:de:4e:ff:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:8B:50:DB:6B:38:72:00:E0:BF:A2:5F:AA:51:B2:24:2B:0E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:6e:5c:a5:90:ea:90:49:e2:2d:88:3c:b7:fd:a4:c8:d6:
         dd:4f:bc:0e:56:a1:e4:d0:ec:4e:d3:65:8b:63:c5:fe:28:a5:
         31:27:6d:9b:2e:80:15:a9:92:88:cc:0f:a9:98:8a:5c:cd:61:
         5a:0d:55:7b:bc:74:2a:a4:5c:93:55:ce:fb:51:23:4a:92:7e:
         41:c2:b5:59:eb:66:c2:a1:0a:46:61:2d:70:a4:97:07:5c:08:
         48:b3:b8:4b:a4:e0:f4:4c:34:75:06:13:d0:76:8b:cf:a0:b8:
         87:13:1c:84:94:f1:5d:0a:55:3a:23:a3:4e:ab:56:51:67:5e:
         c2:12:70:ae:8d:1f:96:e8:b7:fd:68:56:a9:8f:ca:51:76:e2:
         82:c3:e3:d6:26:c1:9c:dd:94:63:34:eb:59:65:68:48:82:6d:
         d7:75:ce:67:f3:ba:34:95:74:3d:af:78:e9:41:e0:10:9f:60:
         9b:54:6e:f4:83:a2:64:58:62:ac:57:a2:88:c8:75:cf:21:36:
         6d:0c:fd:60:7b:7b:d4:bd:65:7f:4d:ca:f5:fa:75:c4:30:d4:
         7e:f4:8f:44:ac:6b:62:db:28:88:ad:bd:bc:66:23:ff:36:74:
         b2:df:7c:e3:ef:29:fb:66:3b:d2:dc:f3:64:e0:a1:ab:ff:0a:
         4a:8c:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:40:53 2026 by rpki-client