Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03b4e171-4470-3812-b218-f5140a37a3d6.roa
File:                     03b4e171-4470-3812-b218-f5140a37a3d6.roa (raw, json)
Hash identifier:          Z9hrb9S9vDXazAvHVbo2nbWyc6fnXPsgodSoYy+H2fQ=
Subject key identifier:   EE:FF:6A:DF:E2:00:9B:72:B8:D4:DC:FA:2E:57:AD:B4:F9:82:57:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA18D66C9541FD47A59BE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03b4e171-4470-3812-b218-f5140a37a3d6.roa
Signing time:             Tue 07 Apr 2026 14:30:12 +0000
ROA not before:           Tue 07 Apr 2026 14:30:12 +0000
ROA not after:            Mon 06 Jul 2026 14:30:12 +0000
asID:                     396589
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:8d:66:c9:54:1f:d4:7a:59:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:12 2026 GMT
            Not After : Jul  6 14:30:12 2026 GMT
        Subject: CN=73ef4fb6-55b7-4ff9-851e-f2a77c08057e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:49:8e:01:71:dc:0c:bd:98:a2:65:98:1e:
                    1d:a5:1c:3a:52:21:90:42:2f:6d:de:d9:de:3c:eb:
                    f8:c9:f4:7e:ff:e8:50:cb:c5:bc:f2:51:07:ac:b3:
                    15:49:90:77:2a:fb:d6:23:09:58:54:fb:d0:61:71:
                    20:ec:9c:74:4c:45:be:35:eb:04:1e:c2:f7:89:da:
                    20:c8:fe:f9:68:43:c6:15:1c:7a:1b:c3:aa:f6:9b:
                    7e:ac:fd:d1:8e:7b:3e:e8:9f:4f:4d:9d:ad:5a:38:
                    8f:f1:8b:82:f9:6b:35:fb:25:88:dd:08:10:3c:0b:
                    fd:aa:be:11:0c:32:fd:91:e7:44:71:3f:71:16:50:
                    5b:7f:0f:60:56:f2:86:7c:76:e6:08:b4:01:2b:87:
                    2a:00:b8:5b:89:bb:39:4d:42:33:1e:51:29:de:03:
                    89:c3:cc:c3:43:4f:b8:6d:48:16:8d:d9:d8:a8:fc:
                    5f:7a:86:8b:76:11:87:04:b9:6e:74:1c:5d:47:21:
                    cc:4c:64:d2:d9:3d:3f:a1:78:fb:bc:8d:b7:8d:3a:
                    a5:56:57:ab:54:33:1e:dd:6f:77:ea:55:94:da:e4:
                    24:28:a4:47:84:bb:da:b1:9b:4c:01:2f:a6:bc:1d:
                    f3:8c:01:5a:fc:c8:3f:f8:9b:79:40:e7:d2:ce:11:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:6A:DF:E2:00:9B:72:B8:D4:DC:FA:2E:57:AD:B4:F9:82:57:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03b4e171-4470-3812-b218-f5140a37a3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:4f:9e:46:8d:3f:65:4e:8b:84:c1:48:f7:aa:0d:a4:9b:
         83:5c:6f:bf:ab:8f:1e:43:f3:e1:d1:7e:9d:b5:44:78:90:80:
         92:b6:76:16:b9:f7:9f:43:21:cd:f6:35:cb:d0:9a:ff:5c:00:
         24:c9:26:7e:a5:7c:25:ab:53:10:5c:e7:e8:8f:f5:81:e7:3a:
         cc:62:bd:89:32:09:20:df:36:3e:d3:a2:69:21:db:4b:e0:ca:
         9c:47:7d:6f:23:4b:af:eb:de:8f:76:3d:81:d6:50:a8:02:7a:
         6a:6b:88:0f:c7:04:d6:14:b2:6d:df:e1:7b:45:29:38:c1:7f:
         01:18:f3:d6:8f:ca:f4:5c:20:77:d0:cc:d8:12:10:21:60:f4:
         64:01:1f:d8:cc:de:a6:32:2a:4d:48:ed:45:c4:d0:6a:00:40:
         b1:04:38:87:8e:ab:00:85:f0:39:ee:53:65:eb:88:81:20:8a:
         ce:59:ac:3d:d5:c5:3f:b1:dc:21:0c:26:8e:e7:57:d4:76:1b:
         74:90:ba:fb:d3:3f:7b:45:5e:57:bb:b1:83:8a:df:60:f5:41:
         22:cb:b3:17:c2:d8:35:d7:5f:a1:6a:2b:c3:0f:49:1f:b7:3f:
         1f:2b:77:c7:b7:64:66:14:22:f6:c2:fd:2f:4a:b6:91:60:8c:
         02:aa:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:47 2026 by rpki-client