Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27da8f24-c29c-30c9-9eee-ea31407534a3.roa
File:                     27da8f24-c29c-30c9-9eee-ea31407534a3.roa (raw, json)
Hash identifier:          FPrmP1MRCB9ndYz6VTNH7flp2yrUXWUkYcGBMPHxNxo=
Subject key identifier:   B0:48:34:A9:01:41:09:62:BD:B0:AF:7E:72:29:99:B3:56:F0:7E:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA193CAD6797DC39C1A2680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27da8f24-c29c-30c9-9eee-ea31407534a3.roa
Signing time:             Tue 07 Apr 2026 14:30:15 +0000
ROA not before:           Tue 07 Apr 2026 14:30:15 +0000
ROA not after:            Mon 06 Jul 2026 14:30:15 +0000
asID:                     40717
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:93:ca:d6:79:7d:c3:9c:1a:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:15 2026 GMT
            Not After : Jul  6 14:30:15 2026 GMT
        Subject: CN=c82a4f23-089d-4faa-baa1-42a2c63b8871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:77:55:bf:92:44:ee:c0:81:59:1c:86:2e:
                    fe:4d:69:0e:06:a3:6f:6e:11:2e:b9:ba:5d:34:27:
                    8d:a3:a1:d5:6d:f4:90:b8:2f:9e:d2:9c:42:04:b5:
                    6d:1c:4c:f9:2d:55:f5:43:e4:fd:54:ed:60:a9:11:
                    7e:fc:2a:7e:74:1a:6c:fb:39:88:c8:49:43:13:62:
                    d7:b6:8f:2c:0f:91:bd:a7:6c:95:b3:67:a5:e6:51:
                    55:14:44:0d:d4:4d:15:07:99:39:de:b2:02:ec:8f:
                    b8:5a:d1:08:6c:15:f2:86:6d:30:0a:af:54:55:40:
                    b8:6f:6a:4b:63:09:43:81:fb:f5:56:f0:4d:cb:a4:
                    3a:39:12:e2:71:17:7f:51:c4:94:d9:51:f7:dd:6c:
                    87:59:59:a2:5b:ea:da:ab:82:b5:f6:5b:ba:73:65:
                    d9:a1:ec:0f:46:fc:0d:dc:90:bd:95:45:2a:2e:42:
                    37:38:f4:30:11:f1:f1:77:b6:e1:43:02:d7:4d:e0:
                    d1:7e:6f:55:08:0d:fd:5c:db:a7:5c:4c:b2:db:7b:
                    d2:86:0d:aa:37:93:2b:8b:b3:39:03:15:d0:bf:3e:
                    a9:cd:eb:64:7f:23:6d:b0:eb:dd:c5:db:4f:41:b0:
                    45:84:4a:0d:d0:b3:32:99:87:7a:f0:73:44:38:e5:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:34:A9:01:41:09:62:BD:B0:AF:7E:72:29:99:B3:56:F0:7E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27da8f24-c29c-30c9-9eee-ea31407534a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:68:ed:f9:3c:35:4d:6f:24:ac:4e:50:c8:bc:88:b3:08:77:
         e3:e8:cf:ab:ec:26:b7:ca:d3:ec:4a:b3:f6:dd:4c:c9:0d:e2:
         7e:fb:ab:58:24:2d:ac:a2:4c:f2:79:89:74:97:b5:68:9e:fd:
         2e:15:81:0d:9e:40:26:79:c0:1a:71:d2:fd:71:17:a6:49:96:
         fb:8f:48:25:f1:45:b3:61:81:4a:b9:0c:ce:ef:45:4c:37:ea:
         cd:02:75:0f:f7:0c:8f:27:90:48:71:fb:99:48:d3:c7:e3:0b:
         46:c1:09:9b:e5:fe:d7:0a:5e:4f:85:12:ef:72:4a:d7:a2:75:
         bc:63:e1:4c:2a:4f:f6:fc:a8:d9:c0:36:8e:22:20:e4:e2:0e:
         6a:79:d0:e5:11:4f:76:92:2f:2a:f1:05:d5:c8:77:04:f6:4e:
         03:f0:f5:d9:22:fd:b3:66:7d:08:77:83:f3:81:fc:be:ff:6b:
         64:76:c1:7f:6f:ec:85:35:94:43:43:72:48:d0:b3:05:e9:d6:
         cc:2f:9c:25:76:4b:af:49:2b:62:74:24:9e:5a:36:5b:a0:29:
         e7:9c:dc:e2:43:23:42:e6:36:3b:b8:4b:ff:e8:46:16:af:b6:
         34:db:96:5e:29:e4:6d:ee:85:da:e1:ec:84:84:5f:11:28:ed:
         f8:c1:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:08 2026 by rpki-client