Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a676ded-f41b-394f-be3e-8493273ad26e.roa
File:                     1a676ded-f41b-394f-be3e-8493273ad26e.roa (raw, json)
Hash identifier:          ZnwWLCGhmB7EkyluleZGzCm3DtoEB/5sE01f7JSJXlc=
Subject key identifier:   0D:8A:35:FB:C5:62:CC:C0:9A:35:DD:73:3C:A8:62:60:AA:0F:E0:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128654D66D6AE621BEF1AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a676ded-f41b-394f-be3e-8493273ad26e.roa
Signing time:             Tue 14 Apr 2026 14:22:15 +0000
ROA not before:           Tue 14 Apr 2026 14:22:15 +0000
ROA not after:            Mon 13 Jul 2026 14:22:15 +0000
asID:                     396580
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:65:4d:66:d6:ae:62:1b:ef:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:15 2026 GMT
            Not After : Jul 13 14:22:15 2026 GMT
        Subject: CN=df460166-d34f-43fd-ac60-5e19a79c9b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:5b:4e:45:e1:3b:22:51:19:7a:68:83:4a:
                    a5:98:e0:f8:89:83:f4:1a:9a:34:26:52:4b:0c:c5:
                    54:f0:8c:87:79:ec:03:c2:cf:af:ca:e7:c4:c4:8a:
                    87:49:45:48:d6:9d:88:93:eb:04:be:f7:d4:2a:01:
                    0a:c5:ad:7d:53:a6:1e:91:0b:e7:6f:3b:9e:f0:0f:
                    b4:26:d8:a9:be:05:3a:1b:09:90:3f:62:c1:53:18:
                    92:6f:68:d7:00:11:ca:2c:11:fb:c2:29:8d:ac:a2:
                    28:49:46:22:bf:51:68:0c:dd:61:f7:1e:28:55:bc:
                    d8:87:02:a3:68:18:43:b5:6e:0a:9f:03:82:a8:e2:
                    89:26:5b:4b:2d:cf:5d:79:39:ae:f6:42:73:b1:4b:
                    88:75:94:c7:12:50:24:51:73:82:68:ac:db:17:13:
                    9e:68:89:80:55:b8:99:31:ba:27:7c:60:78:26:79:
                    ef:f3:7a:f3:d1:85:ff:90:5a:52:40:05:4b:98:6f:
                    6d:fb:d8:2a:7b:4c:68:79:33:54:d7:e0:cf:69:e3:
                    b7:ae:17:99:4a:4d:cd:45:96:28:19:72:0e:e1:44:
                    f1:77:a9:91:03:6c:3c:33:2a:d3:3f:95:38:85:45:
                    9d:d7:46:e8:f8:c5:e5:6d:11:9e:1e:a1:39:72:8d:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8A:35:FB:C5:62:CC:C0:9A:35:DD:73:3C:A8:62:60:AA:0F:E0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a676ded-f41b-394f-be3e-8493273ad26e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:25:6f:9d:e6:a2:bf:19:39:4b:22:22:60:42:9b:26:db:a5:
         a3:c9:b4:4b:d5:0c:d4:f4:b3:c7:2a:2d:29:a5:c4:60:01:c6:
         64:5a:cb:f7:e1:06:86:8f:29:af:a6:01:33:d3:77:db:2a:69:
         8d:ba:2e:55:00:2f:ca:42:9c:87:41:98:2c:82:55:2f:83:f0:
         e0:84:91:8a:f6:a3:26:14:85:cf:53:4b:14:a1:02:ea:89:9f:
         b7:1e:37:84:46:bb:3f:b4:84:4e:6d:09:43:67:cf:6c:dc:7a:
         a3:d5:34:80:24:db:c8:35:46:0f:ac:99:7f:a8:84:47:f9:8c:
         16:19:e6:39:80:a2:5b:6c:1e:6e:89:7c:d4:f5:69:8c:84:41:
         e0:e6:2c:fd:df:6e:5c:bc:84:06:af:92:4d:5b:34:e5:5d:33:
         00:97:57:4d:43:7a:03:65:35:bf:a5:08:2d:24:d4:b2:81:30:
         0a:a8:2d:36:85:0e:83:6c:93:f9:1d:cd:c8:ab:99:59:21:d0:
         1f:1e:19:50:ca:35:1c:3f:e4:f9:8e:05:19:a8:90:40:de:41:
         a3:77:0f:56:b1:68:ce:fe:c6:35:93:8a:70:12:5d:7d:a3:e4:
         10:28:35:0f:29:44:bc:94:1a:7c:f7:b6:a6:15:d4:81:74:19:
         13:23:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:51 2026 by rpki-client