Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa
File:                     250689f7-3368-31de-b24d-7aaf3aaef1d5.roa (raw, json)
Hash identifier:          H5biLvGKvCDuCD7owtVkVx7ODvMECDKIQj3a3fZmDd0=
Subject key identifier:   52:D3:FB:DA:9A:3F:BE:4B:2D:6F:35:30:63:11:44:E9:63:1D:71:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA73D556D6A1C48EBFF100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396609
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:73:d5:56:d6:a1:c4:8e:bf:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=e8bb357f-c081-4336-955b-adb046d2b259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:10:bc:16:f6:00:7d:df:cf:83:9d:b8:55:
                    95:48:c3:0e:6a:94:12:e7:b0:42:fb:f2:80:e4:7e:
                    dc:b2:06:73:65:ae:ef:51:ec:46:44:6f:e3:7d:f3:
                    7b:1f:09:29:12:3f:3d:50:24:0e:2c:52:64:51:f9:
                    9e:c4:d1:fa:f2:5d:1f:32:02:8a:2b:ee:61:3a:cd:
                    dd:30:1f:93:52:e2:c7:8f:a4:8a:50:f4:c3:df:88:
                    39:af:56:fb:cb:80:5d:0d:54:68:7d:5d:ee:3f:e4:
                    73:24:58:89:64:ac:7a:00:b4:48:df:d0:93:5c:a8:
                    7e:54:02:bc:9f:81:53:e0:a7:64:c7:33:b2:33:a4:
                    c6:cf:90:a7:c3:b0:6f:af:8c:f8:21:67:4e:99:b3:
                    b2:59:05:2c:d7:8c:5d:19:98:f9:07:3f:f0:af:76:
                    7f:3a:fc:7b:84:01:d7:49:a9:38:c5:77:b0:b2:14:
                    08:95:19:f0:2c:cb:a1:14:26:e0:23:9f:3e:e6:8d:
                    97:f6:90:65:52:ad:b3:d1:55:e1:64:e8:61:cb:4b:
                    05:5c:60:dd:3d:76:91:f8:11:14:1c:8f:21:57:15:
                    35:f7:d6:35:6a:88:e8:4e:2d:3c:ae:26:46:36:e2:
                    77:76:12:8e:8e:9e:63:68:03:ac:e7:af:52:7e:81:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:FB:DA:9A:3F:BE:4B:2D:6F:35:30:63:11:44:E9:63:1D:71:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:27:25:28:e3:b7:10:83:77:a7:4e:ca:4b:16:8a:b6:ce:
         e6:34:cb:7c:83:44:d4:73:9b:07:d1:59:66:bf:81:a8:e4:a9:
         da:ef:f3:26:74:c3:a6:3e:cd:b5:d8:31:36:19:a1:dd:3f:19:
         54:61:7f:de:34:bb:fe:1f:db:15:dd:ea:c5:60:30:69:a1:62:
         35:13:ba:a4:84:2b:bb:e4:7c:61:61:49:99:e2:1e:b4:b9:4b:
         8c:55:3c:3c:a6:03:5c:91:01:77:8e:27:8b:e9:06:f5:74:91:
         81:59:14:21:84:aa:46:0f:64:2a:0d:71:d4:72:51:1f:ba:a8:
         16:ce:8a:4b:30:ba:4d:d5:32:d9:30:7c:ba:bf:16:26:ff:67:
         05:48:14:b4:32:9f:d6:2a:25:c1:38:2a:8f:37:15:46:b2:63:
         6c:6d:74:5c:ea:0b:a6:9c:49:cd:39:a9:9c:6f:c8:71:29:fb:
         2c:42:b6:7a:34:25:4a:2d:d4:19:17:6c:4f:d1:28:7a:c7:20:
         eb:d3:9e:a5:45:29:24:8f:55:0e:7a:80:cd:35:a1:e4:06:7c:
         5b:4d:32:71:88:d6:00:71:6c:39:0a:27:c1:67:c7:06:3f:af:
         25:f9:76:be:49:7a:6a:14:8a:fa:2f:6a:67:0b:42:96:55:ed:
         f5:cd:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:03 2026 by rpki-client