Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa
File:                     1990ffb1-145b-3ca9-a2e6-a626bc798491.roa (raw, json)
Hash identifier:          0FBpTx13AG7mWnzMp7dS7kQgzZ/fcOodSQs/A99K9BM=
Subject key identifier:   BF:8B:67:75:E1:17:64:29:22:CE:82:59:0B:A6:55:97:EF:24:BD:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA8CEAFEA06430C8FBD480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     36628
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:8c:ea:fe:a0:64:30:c8:fb:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=677fe20e-8374-4b31-816b-8c3537f4a351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:36:78:2f:06:4d:38:dd:10:26:0d:d6:11:
                    76:ad:1c:93:6f:47:44:41:08:e1:13:97:19:4a:24:
                    89:c1:bd:b6:3c:d4:55:69:c2:53:73:bf:26:8c:01:
                    e5:85:44:7c:08:69:fe:3c:e6:a7:68:74:d6:46:b9:
                    2c:2b:84:0f:d0:b7:c8:03:59:58:ea:64:04:e9:17:
                    be:13:3b:bd:a9:5d:75:99:8c:b2:87:86:f8:c0:eb:
                    18:b2:d3:13:69:30:e2:28:de:eb:6e:e3:7d:89:5d:
                    85:84:5a:e5:1c:62:d9:b3:9b:41:72:e2:a4:84:43:
                    66:b6:47:77:a2:ec:c5:5e:2e:ff:d1:70:de:bd:24:
                    01:50:f4:ba:fd:a7:b5:27:40:ec:d4:e6:af:86:51:
                    e7:1f:56:90:ff:6c:2b:8d:36:f6:1f:0e:5e:06:47:
                    5a:66:c1:a3:fd:fe:07:5d:f8:2e:31:74:6d:f2:28:
                    07:67:0f:19:96:f0:f4:5f:91:4d:74:d7:6f:2b:b6:
                    65:b7:ad:4d:b9:46:a5:3f:77:7b:d8:dc:c6:19:4e:
                    87:74:13:73:13:57:23:a9:dc:c9:5f:b7:2d:e8:95:
                    db:7a:c4:fe:c2:0d:de:b6:00:cd:94:de:d6:56:87:
                    5d:1c:e8:a7:38:0c:71:14:34:48:8d:8d:e8:5a:3a:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:67:75:E1:17:64:29:22:CE:82:59:0B:A6:55:97:EF:24:BD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:83:61:47:04:b9:04:42:13:62:35:1d:ed:21:78:8d:10:
         bb:b1:b9:a5:6f:5e:5c:bb:5b:77:44:a5:c2:a2:12:e7:7c:f3:
         05:51:2b:26:b4:8f:1b:b1:ec:30:63:ef:e1:6d:fe:cf:f6:ee:
         ef:e3:32:96:fe:16:7a:73:df:3b:47:d2:22:9b:80:7d:9a:1b:
         c8:aa:65:dd:fa:fb:0a:28:dc:56:37:53:c0:a2:68:80:8e:5c:
         d6:eb:62:a1:42:5e:1b:65:23:11:8e:a5:76:6a:b1:c7:66:b9:
         9b:5a:03:1c:43:38:df:94:29:4a:10:83:a6:f4:e7:81:23:56:
         53:e4:c8:9c:e9:f2:4c:56:48:71:99:40:e1:c7:a2:24:41:7e:
         02:35:9a:a3:83:f8:7e:80:09:31:82:9d:7d:0a:b8:6e:1e:73:
         d9:3f:0f:7b:a6:9d:a9:c7:c4:32:20:e6:ef:d4:a5:07:85:2c:
         5e:eb:c3:7c:bd:d0:1f:ae:09:22:77:d5:cb:e9:79:c1:84:5d:
         b0:fb:4d:25:bd:51:53:77:9e:f9:40:f7:e4:e6:f4:13:5e:a5:
         50:a3:db:19:74:11:90:37:f0:bc:a8:f1:3d:e0:94:af:91:e7:
         ea:08:aa:8e:25:21:68:76:f9:16:ae:bb:a2:07:88:3a:33:a2:
         8f:a4:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:20 2026 by rpki-client