Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa
File:                     061ae4b5-4682-35ff-8956-308c12b39535.roa (raw, json)
Hash identifier:          RG+mWNBmZQyq16fSKKxYSwGL2H/RWdS7X9gRM6Si7tU=
Subject key identifier:   B7:3E:71:8E:A7:01:DA:46:F1:E7:A1:96:4E:0D:25:FD:EC:C7:FC:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE3ADDA739340A00DD530
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396592
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e3:ad:da:73:93:40:a0:0d:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b39a538f-a027-4b17-9e69-0bde185026e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:e5:51:89:5c:3d:f0:8f:7a:24:14:cb:35:
                    b2:82:27:74:cf:96:8c:8f:63:16:86:61:41:61:ee:
                    3d:fd:de:68:41:fb:3f:21:2d:14:94:e6:bc:6c:0d:
                    f9:09:32:2d:d8:4e:df:b3:cc:51:36:1e:e8:55:59:
                    d7:d3:e7:0b:46:e1:65:5c:32:c5:53:4f:a4:41:79:
                    4a:fc:7c:53:ba:79:e4:24:23:9b:56:c0:42:02:68:
                    49:5f:31:05:18:93:5a:c5:e4:56:28:79:ae:b4:31:
                    be:39:2a:df:c4:00:b0:c8:4c:a3:96:8c:18:b1:bd:
                    8e:bf:af:63:1c:45:57:e8:62:25:cf:2a:d2:8a:69:
                    d7:da:5b:10:b0:2b:e6:d4:ba:1d:42:8d:37:1d:44:
                    4d:f6:7d:4c:d3:7d:37:3f:ea:cc:d2:01:bc:0d:63:
                    52:08:df:18:d2:cf:b6:55:9f:05:8a:4e:85:be:3f:
                    c2:5b:bb:5f:8e:52:5d:a7:a1:4b:c8:08:91:39:48:
                    18:4d:16:8c:1d:5e:d3:da:2c:ea:03:7e:32:35:da:
                    96:10:9e:98:e7:03:4d:16:85:d0:7f:6f:bb:fa:f7:
                    d5:8f:7a:5f:c1:b4:a3:f6:21:a1:f7:89:24:b4:8e:
                    ac:03:34:a3:1c:c0:b5:08:39:a4:e4:5e:09:ba:20:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:71:8E:A7:01:DA:46:F1:E7:A1:96:4E:0D:25:FD:EC:C7:FC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:4c:a4:82:dc:b0:89:d0:4c:0b:58:f0:ca:42:29:13:99:
         9e:1c:a0:ba:a0:a7:e7:61:80:1b:a4:58:1a:af:0c:05:03:83:
         90:5e:11:a8:1d:90:58:5f:b3:25:0d:69:7c:04:84:dc:df:55:
         5a:d8:7e:0b:f7:9b:67:22:81:0e:dc:31:41:86:5f:a8:d0:8c:
         1e:a8:79:28:13:49:39:69:c4:e2:7d:1f:17:aa:0a:6d:82:1d:
         8e:1a:36:ce:15:27:c3:f9:58:36:56:be:1a:f8:d5:9c:fb:0a:
         3d:6c:0b:a2:b3:72:a6:9a:81:7a:f4:8d:c8:c5:17:4f:1c:f3:
         92:6e:9a:bc:1a:8a:3c:9a:d3:e8:e8:48:3e:5f:d2:d0:5f:b5:
         fb:4a:52:38:79:01:f6:84:2b:7b:c2:09:48:6c:28:02:d2:db:
         82:37:66:de:a6:4e:49:03:cd:18:b8:f1:2f:41:3c:47:34:7c:
         b7:67:14:c2:51:7f:9f:a5:53:b1:1c:fd:1c:3a:c6:5a:ea:fe:
         72:e4:1a:45:d3:b8:17:26:79:57:be:49:e6:d8:69:57:56:1a:
         e6:3c:e3:4f:69:eb:60:e0:18:ab:fd:22:48:8c:98:76:53:77:
         15:5e:34:d4:b5:85:77:67:66:04:30:e4:44:cb:9f:b5:a4:45:
         dd:5d:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:45 2026 by rpki-client