Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa
File:                     252face9-8cc9-37ac-9d09-516b512859fe.roa (raw, json)
Hash identifier:          cXLZNZVwlDSe5ySvFzi9JI7mdxAab03/cV+HmcHyeGY=
Subject key identifier:   20:DC:08:B8:70:8A:FA:91:96:2E:86:68:16:C5:A9:05:50:85:41:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA19844D662F66DECF23F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa
Signing time:             Tue 07 Apr 2026 14:30:17 +0000
ROA not before:           Tue 07 Apr 2026 14:30:17 +0000
ROA not after:            Mon 06 Jul 2026 14:30:17 +0000
asID:                     397194
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:98:44:d6:62:f6:6d:ec:f2:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:17 2026 GMT
            Not After : Jul  6 14:30:17 2026 GMT
        Subject: CN=7cfaeaa5-bd51-4870-8917-925c0d7611ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:71:94:80:db:06:1d:91:9b:a8:e0:21:7c:d2:
                    03:86:17:b7:5b:48:67:87:3b:d7:af:ce:69:b0:c8:
                    27:19:a3:f4:f0:cc:e7:50:84:4b:75:c4:63:68:a9:
                    ed:5c:ba:e2:1b:52:87:ac:07:26:06:5c:0b:e4:fc:
                    9a:c5:80:e6:65:03:9b:8e:2b:17:68:82:87:77:0d:
                    51:0d:dd:b0:1d:43:02:2a:61:bb:52:5c:9b:17:f3:
                    c0:68:d6:86:b9:1f:2b:b2:c0:02:5a:e3:75:1a:82:
                    35:3a:ad:3a:60:84:9f:81:80:98:71:a6:4c:c0:cf:
                    a6:0e:58:6a:00:bc:3b:27:f2:a4:90:b1:28:95:83:
                    7c:35:96:7b:fc:d6:d1:36:0e:e2:84:b3:72:bf:f6:
                    e1:5b:9a:fe:f8:14:3c:0f:c0:f6:8b:65:2e:9d:e1:
                    b5:5d:6a:2d:dc:a2:84:5b:3e:8d:38:99:f4:be:20:
                    aa:97:62:82:b9:91:42:ef:6c:ea:08:f1:66:47:32:
                    7e:00:d3:de:a4:45:d8:9e:eb:28:a6:51:b4:05:73:
                    ab:89:66:b8:34:73:9d:e2:40:e5:89:60:24:7b:77:
                    92:ac:3a:f4:41:35:96:12:18:83:c9:22:fe:1b:17:
                    07:d6:0d:65:31:80:62:b9:e2:42:68:4c:58:6f:54:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DC:08:B8:70:8A:FA:91:96:2E:86:68:16:C5:A9:05:50:85:41:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/252face9-8cc9-37ac-9d09-516b512859fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:c5:35:83:41:9b:e1:84:2d:14:8f:77:a6:89:0e:74:36:
         a8:09:7d:1d:fc:9c:99:5a:ab:9a:19:a7:2e:26:a0:a4:80:18:
         f5:f0:7f:87:53:cf:1b:e8:b3:f8:e6:7c:45:e6:ed:d6:04:ce:
         00:32:19:0e:ee:12:f0:b7:5a:90:16:60:b4:6f:92:40:25:61:
         b6:b4:db:88:fb:41:60:84:ad:3e:3b:9e:23:64:d9:ab:75:23:
         b5:61:85:ac:a5:87:05:5f:06:18:07:ef:d2:20:c9:50:36:29:
         db:c6:a6:a6:39:05:2f:cd:b9:2b:57:1d:3e:42:cc:6e:0f:86:
         1b:be:9e:3f:d5:6c:1a:c8:48:be:e9:ca:8e:3d:e3:f2:c4:b1:
         5f:9f:2b:8e:a7:fc:75:32:cc:10:9d:36:20:71:82:8f:3a:62:
         78:b1:61:5b:18:e4:dc:4a:3a:47:43:56:20:5f:a5:e2:39:29:
         a1:72:83:18:0b:7b:df:f7:6c:e6:4f:e0:b2:73:99:94:c4:fb:
         a8:0a:24:88:5c:7c:b7:72:e5:ea:a6:8b:7d:8f:93:b0:22:a9:
         59:44:34:85:13:71:b6:37:a2:19:b4:2f:31:bb:7c:93:c1:45:
         09:7f:ed:8a:3a:ea:c8:81:7f:d5:fd:08:c3:9c:7a:54:9b:a2:
         45:a7:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:25 2026 by rpki-client