Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa
File:                     0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa (raw, json)
Hash identifier:          e0Lcnbbumi59g6WGDLYf2n15lE252JUnTUk7WEMk3Jw=
Subject key identifier:   FA:AA:7C:C9:6D:B6:0C:B7:17:AA:B4:F8:B3:B9:EF:14:4C:17:49:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF76D839A7D3B3D973A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396578
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f7:6d:83:9a:7d:3b:3d:97:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=25f04133-9843-4666-8949-21e6c8142ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:72:8d:e9:d7:a3:f7:94:e0:3a:9b:9d:ab:
                    3b:a2:c0:c5:07:44:a9:a3:35:c2:43:0d:cd:d0:5d:
                    cf:7f:c2:cc:5f:1b:7c:cc:9a:a5:97:4e:76:7a:6d:
                    00:3d:5f:01:95:e5:a3:68:c4:da:3e:51:4d:06:ae:
                    0e:d1:d4:5e:15:48:aa:14:34:30:30:0b:1a:b4:80:
                    e0:11:cf:d0:e1:1f:ad:c4:a6:c1:0f:89:4a:0c:6d:
                    f6:ff:8c:25:5c:b9:fa:7e:f3:74:8d:01:f5:9a:9e:
                    8d:71:86:b5:41:5f:ba:68:9f:59:82:d2:b8:d6:40:
                    bd:c2:48:76:69:c5:42:f1:32:84:b0:f6:d9:ef:11:
                    61:b6:05:bc:cf:66:8c:7b:d1:f5:7f:d5:7d:fd:66:
                    9d:34:51:e8:09:86:90:e9:15:5c:21:4d:a6:4b:a0:
                    75:bc:31:0f:f3:09:57:7e:55:68:9f:7b:80:0f:88:
                    59:cb:93:ff:9d:ac:6d:d9:da:b7:2d:af:4c:1e:30:
                    38:b4:7b:d9:0a:f9:b5:35:9f:fc:4c:1e:48:5e:45:
                    cc:60:39:2c:d1:24:d7:64:a3:59:31:de:b7:f9:ad:
                    b6:ef:16:b0:c1:73:77:8e:ec:59:ef:28:d9:e6:03:
                    35:bd:47:c6:7e:85:e6:d9:67:e8:97:33:28:5c:d2:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:7C:C9:6D:B6:0C:B7:17:AA:B4:F8:B3:B9:EF:14:4C:17:49:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:10:24:c5:3b:f2:fb:38:23:1c:62:c9:67:8b:02:f9:76:34:
         a2:d3:e1:a6:80:56:a3:7b:ca:70:e4:16:28:15:8e:89:5b:93:
         15:b5:9a:23:14:d8:43:fb:37:a0:76:2f:46:69:10:e6:a4:75:
         dc:4e:2b:68:46:ab:de:f9:e9:9c:ae:29:25:39:ae:cf:1c:90:
         f3:71:5f:e5:8b:6e:94:38:dc:84:20:9f:9d:0f:09:ea:30:00:
         c7:08:98:85:1d:32:10:c8:d5:f0:68:ee:47:30:68:e6:e6:3b:
         be:d7:7c:9c:85:f3:a7:3c:c3:e3:23:7c:d0:31:27:91:1e:28:
         88:d6:d8:59:16:1f:0e:44:1a:3a:13:9e:c8:53:00:f5:3c:ee:
         a2:8f:fc:11:cf:36:7f:80:60:cf:5d:d0:d8:81:b7:60:f1:07:
         67:5e:12:a3:8a:26:e6:d4:ca:d0:5b:60:e3:de:09:1b:fd:70:
         b4:be:36:c0:c2:47:ce:78:03:db:82:6e:8c:b2:19:d9:f0:94:
         5d:4a:65:9f:59:5b:79:41:8d:17:aa:a8:b5:8d:6c:95:a6:3f:
         a6:d2:5d:c6:7d:dd:c7:32:25:c6:3e:d7:7e:51:c1:e0:e8:50:
         c7:31:85:d5:77:51:40:38:f9:a9:c8:d4:0f:ba:06:ab:d1:61:
         f7:08:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:54 2026 by rpki-client