Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa
File:                     6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa (raw, json)
Hash identifier:          3T6Pjbxs9rhKnxVR61HVGmbmESeMtem1mxfaFw9e6Bo=
Subject key identifier:   1D:83:10:62:36:87:6E:A9:15:B5:56:96:A7:CD:45:FF:2A:4B:AA:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD0906FC2CCB2B56CAB5C9380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     396609
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6f:c2:cc:b2:b5:6c:ab:5c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=65e06878-dfe4-4acc-811f-2e2852c548a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:41:45:18:06:ac:af:0b:8b:4a:79:39:40:
                    5b:9f:67:2b:38:b0:a3:46:cd:e9:75:36:b7:ce:81:
                    7e:83:92:1f:92:6c:df:c2:40:2a:a1:34:b4:95:23:
                    53:7b:f0:fe:e2:3f:ab:a5:da:d3:b5:94:a2:58:5b:
                    6a:44:84:6a:07:c5:9b:da:ec:f6:73:2b:37:0b:fd:
                    17:3c:c1:96:89:27:fc:93:d9:14:ed:90:fd:49:60:
                    2e:14:e0:fb:2d:a3:5e:3f:c2:b3:db:66:99:4a:ad:
                    d4:fc:d9:d1:4d:df:ca:bd:02:c6:30:43:ee:d3:ea:
                    40:1f:04:a0:58:97:a2:cf:29:d0:b0:08:0f:3f:67:
                    e5:d6:2f:8c:75:7e:55:2b:87:cc:6b:f8:57:28:d1:
                    2a:0d:91:bb:b4:76:e2:3a:3f:e4:41:d6:ae:99:cd:
                    7a:24:b7:2c:8e:21:51:8a:04:74:12:b4:8d:bf:64:
                    49:41:18:76:20:5e:26:d5:d9:b0:9f:8a:81:0a:8d:
                    49:51:49:48:20:5f:47:d6:5a:86:08:6e:b9:f1:71:
                    c5:42:f7:31:cb:65:c2:d4:ab:b3:d2:e3:43:92:19:
                    1c:d7:e6:1e:a4:84:b9:3d:e4:66:48:28:c2:58:aa:
                    1e:e5:da:20:44:83:e4:98:e4:d7:9f:d4:4a:4a:dd:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:83:10:62:36:87:6E:A9:15:B5:56:96:A7:CD:45:FF:2A:4B:AA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:57:33:7f:86:ce:ff:27:a4:0b:43:f7:93:e4:3d:de:09:cb:
         a8:98:58:6b:6d:fe:35:85:03:b8:86:45:71:67:e3:b7:b3:4a:
         2f:97:1b:44:4a:f8:da:25:09:51:08:95:bf:11:d8:f8:ae:8d:
         3a:37:4c:e1:af:c7:32:d4:98:52:60:25:fb:19:61:6f:b0:95:
         67:95:0b:0a:ae:7e:39:0d:ed:d9:63:88:59:e0:15:05:fc:7e:
         e2:79:32:d9:3a:50:48:86:64:b2:ff:b5:b0:fd:06:ae:79:55:
         00:f3:09:65:3d:94:83:29:21:79:e5:cd:38:cf:b0:15:bb:da:
         85:cf:ad:78:9c:bf:20:ea:db:85:8a:d2:cc:4c:85:57:ac:b5:
         42:81:a0:9b:10:69:47:6a:ea:e4:b9:18:bc:f3:4d:e8:a7:e9:
         0d:40:b3:3e:6c:5e:65:f1:36:d8:d0:e4:73:2b:c7:7b:2f:df:
         00:38:b4:61:90:29:13:2a:4a:95:c0:db:ee:68:89:5f:c5:0b:
         56:87:05:21:10:ca:2c:54:07:10:37:e5:ec:e5:a9:f0:95:91:
         7f:84:5c:3d:9e:61:28:8e:a0:3c:97:51:55:6c:c7:ff:fc:0a:
         3e:65:a2:60:f8:55:95:bf:f8:f5:7d:82:ee:9b:3d:db:43:d1:
         25:b2:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:40 2026 by rpki-client