Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa
File:                     13195778-fe50-30a6-a003-dd4cb897d180.roa (raw, json)
Hash identifier:          NvDMunGbCQfvfSF9nbYRWEc+dVu+nMZxrrZm64eSG1I=
Subject key identifier:   20:FA:57:62:B5:F4:EF:DF:93:B9:89:9B:5D:4F:20:B0:C8:27:42:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5E1A812D6500165061579000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     396613
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:81:2d:65:00:16:50:61:57:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=77be0914-26fd-4a72-8e46-5429ae6c5bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:6a:a0:bf:85:82:e3:98:b2:19:18:de:9a:
                    b2:39:fd:b2:12:ed:8f:96:27:67:96:18:ab:43:4c:
                    e3:c3:c5:70:72:a8:66:a9:2e:e7:5e:c3:a1:ad:28:
                    ba:68:ed:1f:80:70:e2:d8:97:8a:51:d9:a1:54:a8:
                    5f:7a:44:de:d4:92:50:e7:11:fc:83:cb:57:f8:3b:
                    48:25:bd:08:a3:88:d0:af:42:3a:0c:be:9d:8e:1b:
                    ec:e2:35:cf:c3:19:77:1a:4d:7a:5a:b4:a9:8b:12:
                    ac:1f:8c:ab:76:17:c8:b6:5a:e2:ca:29:9d:5d:5b:
                    b1:a3:89:7e:ca:f5:e3:f0:d2:5c:fe:41:7c:e8:16:
                    0b:fa:74:d7:b5:14:7d:06:2a:c7:8d:93:88:b1:46:
                    72:5a:8b:75:27:73:24:5c:6c:91:79:21:a7:28:22:
                    b2:18:3b:d1:1e:c4:6b:02:ff:57:35:a0:6d:30:e7:
                    0d:f9:4c:6d:cd:d7:57:33:d5:bf:4b:5c:3e:25:ac:
                    e6:85:47:68:c5:2c:d9:1f:13:4e:4f:73:3f:af:a5:
                    37:23:e0:ed:f1:5e:0f:1e:82:fe:21:fd:af:88:79:
                    35:33:6e:73:ad:fe:8a:df:72:3e:1a:4f:5b:ff:c9:
                    68:6e:da:63:42:e6:19:93:ba:5c:14:22:7c:ed:8a:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:57:62:B5:F4:EF:DF:93:B9:89:9B:5D:4F:20:B0:C8:27:42:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13195778-fe50-30a6-a003-dd4cb897d180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:70:39:3b:22:36:54:05:0e:8e:1b:97:d4:b5:ca:5d:45:
         16:8e:66:a3:29:16:bd:e4:c4:22:a4:df:78:66:6e:cf:b1:01:
         98:2c:a3:8c:d1:36:fc:64:75:b9:56:a7:cb:20:4e:99:f1:3a:
         69:28:2a:05:a6:33:36:92:ac:bc:f9:f6:6f:d4:57:fe:91:b2:
         b2:72:20:b8:9b:d7:d5:1b:95:67:88:c2:61:87:59:85:c6:28:
         15:77:32:47:ad:17:6c:d4:18:4a:ba:d1:7c:8d:6f:6a:a9:cb:
         35:32:5e:45:d2:95:ab:fa:99:86:3d:48:6f:09:3d:8c:25:ce:
         15:ef:61:ae:e8:eb:57:7a:77:3d:4b:92:85:97:63:d6:0b:b6:
         68:00:cf:18:e7:2c:d3:97:1a:7d:46:2e:a9:ed:dc:e1:01:d2:
         04:08:77:c5:b0:41:4a:e1:02:fc:f0:30:bd:29:41:d2:f9:95:
         71:fb:05:be:33:30:cb:ce:ac:10:f7:9d:d6:eb:e4:f5:21:f2:
         26:83:f3:2e:1f:9e:12:e2:ce:8a:97:b7:73:dd:78:08:71:bb:
         00:2d:df:d8:97:b6:23:a6:b5:95:7d:e8:de:d1:dd:6f:7e:7c:
         d8:6b:00:02:95:c4:ad:e6:af:17:bc:0f:91:10:48:7a:64:59:
         07:bc:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:37 2026 by rpki-client