Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1089bfd2-60b2-3aac-b1bd-8245bec69b94.roa
File:                     1089bfd2-60b2-3aac-b1bd-8245bec69b94.roa (raw, json)
Hash identifier:          JW6bPmsy0PoEM2jh+WMw2zR2FWz/LwcjWGAQmOmzSRI=
Subject key identifier:   D2:7B:72:89:75:7F:FC:95:90:DE:FF:54:97:F6:51:82:D2:56:1E:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADB88F404752FC1E21180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1089bfd2-60b2-3aac-b1bd-8245bec69b94.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397212
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:db:88:f4:04:75:2f:c1:e2:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=35affc56-b8e3-4541-99cd-f81a24dc2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:51:9f:6d:0b:1a:95:6b:29:8f:89:5e:29:
                    11:ec:ac:ca:bb:2f:17:30:25:3e:92:1e:df:8e:3a:
                    fa:68:98:3b:e6:cb:70:b1:c0:fc:59:32:76:5b:d3:
                    d1:44:b3:be:d9:7e:e1:63:a0:b0:5a:5c:b7:e5:6e:
                    b7:da:0d:30:78:b0:82:0b:7b:30:41:71:d4:6d:4e:
                    b4:57:ff:94:93:51:4c:41:7e:c4:5a:3b:af:06:13:
                    76:48:c5:55:e8:4c:d3:ae:07:79:ff:8a:6b:fb:45:
                    2b:2d:d4:56:9f:cb:05:50:d2:62:c2:48:9c:7b:43:
                    5c:07:2b:56:6d:a2:16:1d:9d:8f:68:d5:5f:18:d6:
                    fa:b6:3b:da:cd:48:e0:dd:22:8a:88:d9:69:6a:ce:
                    21:31:c0:22:13:a2:22:d3:b7:e7:44:3b:d0:8d:ab:
                    d2:49:a5:e3:0b:48:89:05:f1:1b:ad:71:70:50:1b:
                    3a:02:cb:c7:d8:d8:fc:a4:3c:6a:c4:a2:5d:f3:17:
                    60:30:d1:b2:5d:65:81:0a:43:ab:78:fe:46:1f:e1:
                    e5:f9:eb:48:ab:31:71:ed:94:d3:fe:d5:7f:a0:fe:
                    6b:eb:52:07:f5:a7:55:c2:56:02:6f:2d:a1:c2:4e:
                    56:95:da:b7:95:8f:94:9b:1d:8d:b2:09:23:e8:8c:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:72:89:75:7F:FC:95:90:DE:FF:54:97:F6:51:82:D2:56:1E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1089bfd2-60b2-3aac-b1bd-8245bec69b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:56:36:b5:d4:0c:bc:ec:99:6a:ea:db:92:27:4f:69:a0:
         0a:fe:80:13:2d:c6:28:9b:e5:7e:85:a1:77:a6:15:d1:70:2a:
         01:2e:77:02:c8:85:0e:76:8f:1e:92:df:74:67:c3:b5:16:d6:
         6c:1e:7a:08:bf:61:9a:ab:e1:80:97:3f:20:cd:5f:26:7d:3b:
         21:0c:3f:03:24:87:1e:f0:48:f2:0b:e8:36:3b:11:f2:3d:6b:
         ed:20:0d:f7:1d:6d:a0:b7:2f:e7:f4:70:78:66:5b:cc:11:4d:
         f6:7d:d7:a9:fd:90:f7:6b:0f:61:3d:60:22:ab:90:85:ab:cc:
         e0:4b:9f:38:8f:07:33:8c:4f:58:f6:00:74:a5:4f:70:9e:39:
         58:15:74:e0:ea:18:3d:1b:aa:8a:9f:cb:47:06:73:9f:2c:72:
         49:b8:46:5a:34:01:cf:bf:64:de:75:3a:8f:85:ad:31:4f:cd:
         c1:cf:de:c6:0a:6d:f4:cb:92:3d:bb:b1:79:58:61:0d:02:3d:
         44:64:97:8b:48:77:e2:2a:3a:77:85:70:be:04:30:d4:ed:21:
         7f:f9:01:2f:b7:22:18:50:e9:8d:15:16:9d:2e:a9:2c:01:b5:
         83:eb:62:bd:91:17:18:d5:9c:27:39:fd:25:b9:d5:e1:7a:58:
         a6:a1:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:46 2026 by rpki-client