Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16bd4d5d-a167-3f79-b836-7ed68e5793de.roa
File:                     16bd4d5d-a167-3f79-b836-7ed68e5793de.roa (raw, json)
Hash identifier:          F+v9odcdp1QEynAjlG3MeSOh4sE4bbsRQ0hM5hZ/Xi0=
Subject key identifier:   4A:1C:42:DD:06:53:A7:38:5D:F1:FA:92:53:E8:25:F6:F2:32:30:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF0F930B658BF33DA8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16bd4d5d-a167-3f79-b836-7ed68e5793de.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36623
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f0:f9:30:b6:58:bf:33:da:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3540bbfc-4eb0-4209-9418-bc469d10c06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:f9:4d:30:a0:93:fe:b4:a1:d2:16:11:80:
                    0a:37:e1:04:30:df:c2:81:24:b5:fd:8e:1c:26:af:
                    f0:cb:09:ec:34:6a:13:24:e7:b2:3c:0a:8b:be:04:
                    97:ab:08:81:35:40:6d:51:ef:4b:8f:60:e6:8a:a6:
                    12:0c:ca:51:a5:ec:77:c7:2b:f0:31:51:1d:1b:c7:
                    b7:05:ed:86:c3:89:19:fc:7e:b6:3a:d9:25:7f:8d:
                    de:3e:44:f9:9f:85:4a:79:68:a6:ea:c5:2c:78:54:
                    63:05:b4:68:2a:27:00:34:e9:80:25:97:65:81:a5:
                    6d:17:2d:3c:88:e6:99:48:77:36:59:12:f5:33:9b:
                    62:be:2e:17:f6:95:0a:0d:5d:f3:d5:8d:7a:02:c8:
                    32:fe:32:38:56:dc:20:98:36:51:3d:35:72:f1:cc:
                    22:23:90:47:6d:0f:d4:9e:86:96:30:7b:3a:3e:cf:
                    f2:28:80:ca:4a:59:12:46:90:23:eb:cc:fb:42:59:
                    de:1e:d2:cf:ce:c8:11:79:2e:d5:0b:22:67:8b:67:
                    2f:9f:96:26:bd:1f:0a:20:0b:90:36:ad:3b:c4:cb:
                    38:8a:da:42:29:74:2a:ef:75:be:91:1d:8e:0f:02:
                    0d:9c:c4:91:78:40:07:c8:c9:bb:c9:63:ed:2b:ee:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:42:DD:06:53:A7:38:5D:F1:FA:92:53:E8:25:F6:F2:32:30:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16bd4d5d-a167-3f79-b836-7ed68e5793de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:78:47:69:13:73:20:de:e6:55:6b:26:56:56:63:a0:80:07:
         ad:89:55:b9:b3:26:bf:94:d0:d8:d0:15:a9:cd:ac:bc:0c:da:
         43:e0:67:95:f7:c7:42:38:1f:a2:03:c8:57:ec:1a:5c:14:97:
         2c:b8:c7:86:64:62:b0:62:3d:58:4a:6b:00:6b:42:48:45:71:
         6f:1f:af:db:aa:bd:fd:f1:e3:2c:3a:04:3d:ca:f1:ad:72:53:
         a4:e6:76:20:6e:c5:f3:14:7b:56:b2:35:2b:55:48:13:5d:2b:
         25:f9:49:bb:21:bf:64:1c:d0:3d:95:63:ea:f9:10:1f:39:69:
         25:38:76:9a:6e:e9:9a:f3:de:10:85:f0:cf:df:77:b2:3d:a7:
         d1:bc:21:71:07:e2:29:a2:e9:76:07:af:be:57:48:11:c7:41:
         6f:b3:f9:2e:6c:45:25:ea:b6:ae:ac:77:84:be:c1:82:6a:17:
         01:9a:79:b7:43:a3:4b:3b:0e:0b:a9:08:78:0e:79:37:e4:0f:
         07:eb:10:cc:bc:e0:e1:13:51:76:ac:a2:31:ea:40:25:57:ad:
         95:c2:4e:d9:82:f2:a2:18:2c:70:bf:af:22:25:79:2c:2a:d5:
         fd:a5:aa:66:4f:5a:10:e4:80:d7:b3:62:2f:f2:e7:56:e1:2e:
         16:e5:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:48 2026 by rpki-client