Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa
File:                     34ec6046-70ab-3efa-b492-febb1f9daff2.roa (raw, json)
Hash identifier:          fXDgJ3EpG9aOGEujbd4LDTOmEIN2G/nYruo2ZDj8Ong=
Subject key identifier:   85:E1:54:39:BE:23:1A:06:E7:49:5D:F1:0A:AD:DC:1A:30:1B:26:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA0702858A22C659CC73080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     40647
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:70:28:58:a2:2c:65:9c:c7:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=7874ae37-370f-4de9-8f23-6aceef6d2e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:f3:cd:e6:2a:80:60:20:cc:69:9e:af:8d:
                    17:94:a4:0a:8b:9a:b0:50:42:5f:54:77:d0:43:39:
                    db:92:b7:1e:e0:41:91:2b:3d:51:dc:a8:97:0f:ce:
                    1b:63:b3:03:c4:05:f7:67:6e:9d:56:ec:8d:18:f8:
                    5e:65:ab:9c:b0:6c:b4:9f:73:25:d4:92:46:d6:a8:
                    b3:53:a5:68:1c:30:40:b1:a2:18:29:d1:1e:cf:11:
                    3b:cb:da:e3:81:36:92:40:35:fb:22:6f:2a:d8:f3:
                    32:bf:f0:99:cd:ee:fe:b1:e2:a6:5d:e7:ff:00:cc:
                    50:87:fe:37:70:af:af:04:ef:5b:d8:25:05:c8:45:
                    84:45:d0:85:b5:91:24:f2:f5:66:b2:bd:60:b0:ab:
                    13:d4:54:c1:a3:2f:48:f2:7d:0f:27:27:a0:7e:3e:
                    c2:ef:75:93:ad:3e:1f:e5:c5:29:34:78:8e:75:6a:
                    ce:89:e1:03:44:be:9a:70:df:fa:f0:6c:65:17:0e:
                    5d:99:e1:ba:71:df:20:ef:d8:d6:5e:42:35:40:33:
                    93:bb:c9:15:c5:27:e4:dd:29:87:c3:a9:9f:db:19:
                    e3:2a:ac:ad:72:d8:09:f7:8d:0f:6b:c9:7a:69:3c:
                    24:f9:42:a6:62:32:cd:ef:6a:f9:e4:90:69:52:af:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:54:39:BE:23:1A:06:E7:49:5D:F1:0A:AD:DC:1A:30:1B:26:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:57:23:29:67:fc:b3:36:cc:08:10:11:5d:17:51:db:23:
         26:1c:65:49:e7:02:76:52:cb:02:66:72:1f:3b:1a:88:17:a7:
         ff:95:e4:8d:31:78:fd:95:76:e6:95:72:c4:4b:20:ff:cd:4c:
         b3:85:08:71:73:4c:71:bb:7c:11:53:e4:80:0e:7f:99:14:7c:
         8f:bc:0e:71:ff:bd:70:3c:6d:70:4d:13:c9:72:09:2d:0b:19:
         02:2f:cb:fa:46:10:29:f1:83:8a:58:7c:a1:18:53:e0:22:68:
         b7:9b:0d:ad:8d:03:0c:1d:b8:5b:41:25:88:6d:e5:55:1b:83:
         05:40:19:42:f6:87:69:d8:e1:0a:ab:a5:60:2f:16:a1:ad:6c:
         65:b1:d6:46:0b:21:a6:c5:2f:38:6c:2e:e8:8f:25:12:38:22:
         75:16:fe:b3:75:09:b7:12:1e:ec:f2:14:d1:5e:65:94:b8:8e:
         2d:81:29:ac:14:3b:7c:27:4f:72:76:14:7b:45:89:f0:2b:dd:
         92:62:6e:72:3d:0b:2e:d8:d1:c6:fc:74:82:9d:f8:83:1d:c6:
         5c:2e:ac:26:fb:0c:5a:64:4f:3a:91:cc:b7:08:53:62:4e:c0:
         c5:1f:c9:f4:54:17:d3:93:06:e5:2a:e4:8a:48:53:aa:fc:62:
         20:8b:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:44 2026 by rpki-client