Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d55b756-272e-3e09-9df3-4953d43c74ef.roa
File:                     0d55b756-272e-3e09-9df3-4953d43c74ef.roa (raw, json)
Hash identifier:          /byNadE+VMmLd/OZCDAHbs4FJMhd8qFEkfpP80Al2MM=
Subject key identifier:   26:5E:B4:F1:2E:E1:5B:45:67:88:5B:F4:5D:0D:30:0D:D9:C4:AD:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA86D2AB8B39AB301FD4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d55b756-272e-3e09-9df3-4953d43c74ef.roa
Signing time:             Thu 02 Apr 2026 14:22:44 +0000
ROA not before:           Thu 02 Apr 2026 14:22:44 +0000
ROA not after:            Wed 01 Jul 2026 14:22:44 +0000
asID:                     396567
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:6d:2a:b8:b3:9a:b3:01:fd:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:44 2026 GMT
            Not After : Jul  1 14:22:44 2026 GMT
        Subject: CN=d8f1f373-cb9d-4e04-871e-4fd51cf110a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:7d:0c:70:51:9a:8e:b7:31:5d:d8:78:6a:
                    e4:ad:3b:87:a0:dc:ae:d1:34:84:8d:f7:1d:11:d7:
                    c3:07:f9:cc:06:2d:81:b3:b4:60:67:a8:e2:42:14:
                    83:75:b6:bb:41:f2:da:3b:cb:a6:47:ab:08:7a:e3:
                    38:54:3f:3e:b8:57:94:85:96:c7:c4:07:a1:79:a1:
                    06:28:08:0f:b8:b5:94:74:23:ae:74:57:f8:2e:19:
                    a2:4a:41:d9:c9:5c:66:fc:41:d6:91:4f:ae:ea:cf:
                    75:71:36:a4:34:0a:53:fd:26:b0:40:92:9b:79:c9:
                    2e:1d:cb:39:ca:cc:65:71:57:ad:26:5e:ae:31:e8:
                    57:2d:5b:13:0f:9a:1b:fe:e3:71:78:c5:4b:38:7e:
                    89:e5:5b:e4:d2:45:48:6f:75:78:5b:12:df:ee:77:
                    85:bb:94:09:0c:a4:73:72:39:7b:fc:b8:86:20:4f:
                    35:19:7f:5c:a7:0d:ca:46:a7:14:6f:c8:1d:53:8a:
                    0d:e6:3e:aa:27:db:22:8b:f0:9b:7f:18:0b:b7:ed:
                    e5:8d:7a:3d:23:36:ce:90:cd:11:d7:2b:5c:1f:34:
                    be:65:34:2b:c3:82:f5:58:bd:42:6b:7f:66:11:ab:
                    bd:bc:6e:83:ef:3c:5b:ad:bd:72:1e:f6:60:19:71:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5E:B4:F1:2E:E1:5B:45:67:88:5B:F4:5D:0D:30:0D:D9:C4:AD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d55b756-272e-3e09-9df3-4953d43c74ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:ef:83:1d:86:27:b0:6a:bf:19:8a:eb:33:0d:29:22:f8:
         e4:2d:0a:88:0b:98:7b:71:15:5b:7a:5e:31:6a:cd:df:3d:30:
         f6:7a:11:7c:25:4f:c2:ef:0e:c6:c5:03:24:c9:af:5e:ca:9f:
         ab:34:2e:ed:ad:1e:ac:7b:17:71:d5:fb:15:41:36:aa:1f:b6:
         4d:e2:dd:54:bc:db:34:fc:b1:5d:cb:55:d0:1d:bc:5e:02:aa:
         65:71:5b:ad:ab:d4:b6:c5:27:3a:9c:cb:3b:f8:68:49:83:d9:
         af:7c:d8:0a:e3:b3:1a:85:d8:60:13:d4:29:7a:25:4e:7c:95:
         3c:6a:b2:c9:d4:07:e5:42:f4:59:49:da:74:b2:3e:a1:43:f0:
         28:0b:a5:7f:dc:71:fc:48:c8:cb:2f:59:3e:64:18:31:ac:d5:
         d1:77:ef:2b:11:63:10:3c:29:2f:ae:ef:c9:a0:22:07:2f:c8:
         4a:6f:b9:1c:64:f5:89:3a:d1:15:a1:82:01:47:d5:27:8f:98:
         6d:0e:63:8e:aa:09:2b:03:2a:8f:b1:41:93:41:13:2a:a1:41:
         97:83:2c:0b:62:11:7e:5a:3c:91:0d:b6:be:2c:6b:1e:9c:b0:
         ba:96:09:fb:1c:ea:f0:1d:e5:eb:23:d8:82:0a:9e:32:1b:85:
         6d:91:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:18 2026 by rpki-client