Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
File:                     3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json)
Hash identifier:          RirQDo5CBFlQ8nlEgLqQYz1NkN6dAgBnw9rd3ScGOcw=
Subject key identifier:   34:3C:6F:40:02:34:36:96:AF:7F:FE:EB:EC:43:E9:07:07:2F:81:97
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F4328584E7634CCCE6FBDDF2CB26EFE00
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2605:32c0:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:cc:ce:6f:bd:df:2c:b2:6e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=38f3f110-9440-4d9f-bdf2-951015face66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:54:85:2a:7e:a2:c8:0d:54:94:ea:46:66:
                    d8:7b:e3:28:db:29:62:04:1c:77:3b:f4:cc:14:37:
                    20:ad:d4:96:88:78:87:af:f7:fb:d6:99:75:1f:86:
                    5e:80:5d:7d:5d:63:b2:5d:2d:05:af:a7:96:53:fd:
                    7d:c5:64:80:3b:d5:8f:f3:d7:98:f5:98:d5:00:00:
                    be:85:d0:9a:3e:4e:bd:44:ec:18:1d:ee:d8:73:7a:
                    bf:63:82:d0:9f:b9:c5:97:66:37:55:95:ab:3d:f9:
                    61:3a:1c:a8:3b:c9:0f:30:e9:ca:3d:96:4a:2a:f8:
                    a0:43:f6:f1:72:b8:b7:2c:0f:43:78:0a:ad:0b:5a:
                    db:58:5f:67:a4:53:07:d9:82:9f:3e:9b:70:7c:c2:
                    94:0b:ef:c9:2d:5c:66:8a:38:3c:57:a4:17:32:b9:
                    f7:8c:b4:c2:bd:83:a8:9b:6a:aa:25:a9:15:37:68:
                    20:e8:82:81:ca:58:f7:3f:eb:ee:a8:fe:62:88:3f:
                    1c:58:a6:72:92:e6:10:39:09:ed:76:41:da:8a:13:
                    a2:d5:32:8d:3d:3c:6b:c0:18:b6:5d:22:e5:1f:30:
                    fc:0b:56:8d:59:bf:5f:2b:3e:1f:d6:9e:c1:07:6e:
                    a5:68:1d:87:d3:b7:79:d4:de:75:33:0e:f7:0c:d0:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:6F:40:02:34:36:96:AF:7F:FE:EB:EC:43:E9:07:07:2F:81:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:32c0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f5:6f:c6:ea:98:46:9f:d4:a4:3d:5e:4e:8e:6f:12:ac:2f:
         4d:f6:18:0f:e0:df:2d:6c:dd:57:ac:ce:40:aa:6f:b8:9f:4d:
         ba:0b:67:c9:89:d0:07:7a:76:cf:6e:c2:a7:42:0d:2d:da:24:
         42:d7:45:ba:69:80:b5:a8:dd:be:79:0e:21:25:a8:9a:d3:d0:
         7d:4d:d1:36:8a:48:34:26:65:19:c8:13:9c:a8:3f:39:24:b7:
         50:75:d3:62:7f:9b:a7:74:7d:4a:4c:6c:2e:ce:55:04:d4:d2:
         e1:35:4c:b1:0d:38:1c:66:6c:79:ad:c9:cb:f3:ce:f9:76:70:
         a6:41:b7:54:f5:46:9f:22:0b:8d:04:20:56:5b:5b:78:aa:b5:
         7f:3f:99:37:50:b5:23:bd:a6:d7:c7:9a:10:f6:1e:02:4f:2d:
         5f:cd:71:c2:56:56:14:1a:6d:be:51:7f:1c:8c:c5:ec:d1:06:
         cb:7d:4b:ef:9d:b2:1e:66:49:ce:3f:04:b5:ce:10:13:7b:46:
         41:00:95:1c:d0:0a:35:ab:29:15:72:f9:55:25:4d:e1:42:5b:
         37:11:8e:62:3d:6f:83:47:e1:26:71:0b:70:59:14:af:04:00:
         3f:83:c9:f6:d5:fd:91:76:8d:c3:7c:ef:1d:42:eb:cf:cb:7a:
         5b:bd:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:39 2026 by rpki-client