Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
File:                     11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa (raw, json)
Hash identifier:          gJWrj/x1o0Wbkbso96+uISZ3MZG58DAsmLxskjaN1FA=
Subject key identifier:   A2:AB:3F:84:85:FE:A0:E7:0C:CD:C0:E8:E8:66:93:91:99:11:1B:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956B30C9FC393A49E5C580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396563
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:6b:30:c9:fc:39:3a:49:e5:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d73288f7-a40f-4c84-aaa5-932c11c48bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:df:78:bd:c1:cb:8f:b2:29:2b:2d:bf:1f:
                    03:71:8c:44:91:59:ea:a3:be:0a:c0:b7:03:f3:e6:
                    8b:c2:91:28:fa:e1:54:a8:14:8f:72:e2:dd:9b:c4:
                    79:38:15:60:db:18:6d:39:7f:73:d6:5f:68:57:da:
                    82:41:9f:a3:4e:43:3f:f0:87:a5:48:a0:dc:c8:e0:
                    a7:b8:14:f6:e7:16:a9:a9:f6:6c:c3:df:b3:d5:b0:
                    8c:da:05:e1:ac:0d:dc:30:6b:a0:cc:0e:2a:a2:cf:
                    21:77:d5:49:43:b4:75:16:7f:a7:2f:58:d0:61:a9:
                    43:d0:bd:e4:f2:d9:4d:7b:be:c9:50:ca:fb:25:e4:
                    19:3c:cd:2c:40:d3:7c:90:0f:53:49:46:71:ce:db:
                    6e:c2:52:a1:ff:85:7a:32:6e:66:95:84:c6:ed:05:
                    81:02:28:b2:60:4b:11:e3:ac:b7:d6:0d:98:9a:83:
                    0e:ac:69:94:6e:cb:79:89:e5:26:08:0d:ea:eb:4f:
                    93:1b:3c:69:ed:c4:56:c6:3e:99:1d:7a:2d:89:47:
                    f6:23:c9:11:84:97:66:a2:42:e6:0b:dd:07:49:e6:
                    b4:c9:5b:e6:23:df:32:be:d0:63:0c:20:23:2a:bd:
                    dc:b6:d3:06:03:28:4d:15:18:4a:5f:2f:da:a1:c9:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:3F:84:85:FE:A0:E7:0C:CD:C0:E8:E8:66:93:91:99:11:1B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:49:fb:a6:eb:d9:b1:f5:18:7a:7f:6d:14:51:f3:83:7e:01:
         4f:21:5b:4d:99:74:2e:98:0e:52:16:07:cb:91:8a:9c:d6:5b:
         d6:96:aa:43:a4:aa:65:27:0a:46:ab:35:43:cd:88:db:f5:f7:
         14:2b:c7:dd:2a:d9:e3:70:2a:a1:9c:00:b3:89:95:c0:ee:28:
         16:38:02:b2:8f:64:02:e6:b2:a9:1c:23:12:d3:11:43:42:7b:
         09:bf:1e:97:4b:7d:2c:d6:ac:96:33:f4:db:42:21:4b:ba:8b:
         95:b3:0b:59:53:4c:d3:03:14:d1:d7:80:a3:92:e2:42:ce:15:
         79:ff:5d:39:9e:e1:78:ff:60:47:2e:41:52:d4:34:b4:26:1a:
         b1:8a:cd:58:a1:92:f2:72:32:19:15:74:f0:aa:5b:61:a3:26:
         7e:e5:b3:12:b7:e1:cf:7c:0d:2e:7b:41:1e:d8:8d:bf:22:47:
         b1:55:7b:64:14:5f:b6:79:27:49:76:e1:dc:32:ba:72:30:ee:
         24:6b:a7:23:bd:94:cc:e6:fd:7f:4d:00:73:b4:2b:17:36:95:
         01:2a:37:18:2b:15:78:e9:7d:1e:d2:8e:c1:80:1f:18:5b:4f:
         07:56:fe:16:de:23:03:42:35:36:5c:34:29:e9:09:4f:d8:df:
         66:8c:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:32 2026 by rpki-client