Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa
File:                     29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa (raw, json)
Hash identifier:          bIUN/f6cNpNHVppLPf5VIvUeYnQhhHccp11GuVjW/Qs=
Subject key identifier:   D3:79:73:B2:76:7E:DC:FE:02:8A:A9:39:68:95:B1:BF:2F:B3:11:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA76DFD4BEAF5D02D70D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     36624
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:76:df:d4:be:af:5d:02:d7:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=2cef42c0-c987-4f5a-83ef-9eb84b3d5eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:f4:03:a8:7e:68:0b:4d:ce:5f:cc:8e:64:
                    b6:dd:10:dc:bb:24:40:f0:54:12:22:28:72:d6:64:
                    00:21:b5:94:a7:f8:c1:b2:c4:11:a5:32:8a:e0:1c:
                    56:c4:fc:46:bc:15:e6:4e:db:27:b5:bd:fa:e5:d7:
                    42:b3:c7:f2:ef:7e:4a:9c:6c:97:3e:3a:52:da:fa:
                    b6:9e:49:d7:13:4f:a4:a3:a3:43:66:12:86:c7:1a:
                    f9:eb:c6:57:ca:7a:14:65:e8:9e:9f:00:ec:29:ee:
                    97:5a:31:af:cf:9d:c3:d8:5f:cb:7d:6c:15:4f:ac:
                    d4:fa:64:64:a7:85:aa:3e:a6:26:8c:16:de:b9:ad:
                    ad:87:25:27:39:46:d2:5b:3b:08:4f:39:89:af:ac:
                    7a:6e:06:8d:0f:43:aa:a2:64:06:75:c0:03:3a:98:
                    0b:43:ee:c2:31:92:3d:7f:f8:85:ab:cb:fb:f7:78:
                    58:23:39:17:aa:d6:d5:56:ad:e2:e7:b3:05:ba:e0:
                    b3:02:24:54:7f:4d:a8:86:e3:a9:d9:5b:a3:94:86:
                    3c:42:f9:59:ec:a2:05:74:d6:73:fb:c2:c8:68:86:
                    a5:65:f1:64:b4:2c:50:22:eb:d2:f6:67:27:6a:bf:
                    11:cb:92:33:17:61:59:4c:63:3c:50:cd:7f:43:79:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:73:B2:76:7E:DC:FE:02:8A:A9:39:68:95:B1:BF:2F:B3:11:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:4c:85:fe:ab:35:89:79:a3:79:31:af:f0:f3:22:57:ee:
         ff:e0:bf:f5:5e:f3:14:ca:5d:83:7c:f3:dd:17:25:ac:df:a1:
         bc:a5:92:7f:cb:ae:2a:63:e0:34:d8:4c:6d:17:c7:91:f9:0b:
         d4:42:6c:f2:34:c7:ae:77:e2:5d:cf:05:3e:f4:91:48:cd:66:
         50:17:69:b9:46:a8:88:04:1d:f4:3e:a5:1b:14:74:ad:69:5f:
         5d:c8:fc:55:49:85:5c:b2:46:96:03:38:23:5a:df:81:91:78:
         4b:85:21:66:dd:e0:16:49:36:a5:d1:8f:30:92:d4:52:79:28:
         6f:ea:18:7c:fd:99:31:30:80:49:67:26:47:16:39:b2:bc:19:
         0e:95:23:38:13:4e:57:f1:1b:5d:e7:ef:63:b4:db:08:57:32:
         80:c4:0b:76:51:83:36:11:1b:aa:39:9b:8d:24:04:85:44:98:
         77:37:b5:d2:79:6f:0d:db:4a:c7:30:14:97:7c:3d:f3:61:96:
         72:0f:97:2e:0e:e6:5a:4e:a4:6d:40:fd:ed:f4:cf:c6:f8:90:
         a5:ae:36:f6:48:41:af:18:5e:78:d2:41:17:b0:d2:0f:7e:8b:
         43:4d:c5:c9:a1:08:51:ba:c1:83:0b:8b:8a:ab:e7:7d:13:e6:
         2f:c3:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:41 2026 by rpki-client