Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc314dd-58d9-3d3a-9d21-fede0be0dcda.roa
File:                     2fc314dd-58d9-3d3a-9d21-fede0be0dcda.roa (raw, json)
Hash identifier:          TOR6O/vxuRrs7iMotPoSYeZB6T25bJ9dMeq4sxx3YGk=
Subject key identifier:   F4:6E:29:7E:90:AA:5F:57:0C:23:F1:5E:24:F1:94:46:11:C3:D9:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD3BE2E667FEF9F6F2E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc314dd-58d9-3d3a-9d21-fede0be0dcda.roa
Signing time:             Thu 09 Apr 2026 14:07:50 +0000
ROA not before:           Thu 09 Apr 2026 14:07:50 +0000
ROA not after:            Wed 08 Jul 2026 14:07:50 +0000
asID:                     36626
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d3:be:2e:66:7f:ef:9f:6f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:50 2026 GMT
            Not After : Jul  8 14:07:50 2026 GMT
        Subject: CN=b520ef87-a59e-45a9-9e93-3a5293dfe4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:88:18:1c:86:20:7c:7d:5e:a7:7c:0a:83:43:
                    f9:90:ba:7e:20:c5:35:48:32:57:dc:d0:b1:57:d0:
                    3a:f3:20:73:38:a8:2a:4d:58:ca:fd:1b:f9:7e:d1:
                    65:ba:95:a5:d0:7a:f6:8c:75:f3:2f:d5:02:87:df:
                    ba:63:c0:92:f1:85:80:68:64:74:75:b4:57:ef:d9:
                    41:51:a1:1a:b8:d2:70:67:89:e3:af:9d:eb:a1:eb:
                    87:62:fe:ff:cd:c0:f9:bc:2f:23:7b:be:4a:39:b3:
                    cb:de:26:07:e0:30:5a:30:82:53:70:57:97:d3:ce:
                    e4:d6:58:31:2b:8b:02:e4:da:f9:08:dc:7a:ad:b6:
                    76:c5:33:8a:45:ae:71:51:a2:73:3d:1c:11:96:9e:
                    95:55:5b:a2:45:1d:39:1d:e2:8f:53:6c:05:a9:b4:
                    ab:80:94:5b:41:da:c8:99:d6:01:36:3d:e1:18:55:
                    64:b9:e6:05:5f:d7:d7:90:85:95:cb:38:db:c8:88:
                    65:c9:a8:99:02:a0:b1:fc:ad:32:b7:50:ab:64:4e:
                    f2:c2:dd:b8:e6:af:db:45:10:f4:d4:a1:5b:cf:eb:
                    29:3c:12:c2:09:97:31:1d:05:43:9c:41:ae:a9:c5:
                    e6:ad:6d:fc:a1:bf:3e:1d:f9:96:6a:da:9a:c2:23:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:29:7E:90:AA:5F:57:0C:23:F1:5E:24:F1:94:46:11:C3:D9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc314dd-58d9-3d3a-9d21-fede0be0dcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:f8:2b:2b:be:c1:f1:cb:f5:bd:0c:b2:ea:6a:9c:78:e6:
         3f:d8:54:ba:10:3f:e1:e4:a3:8e:44:3a:92:f1:ca:f5:8d:f4:
         a2:48:f1:9a:b3:8a:30:4b:ea:3d:ff:88:63:0f:49:38:3d:eb:
         6d:0f:40:33:81:0b:b5:fe:d5:99:95:76:5c:9b:0c:5d:d6:85:
         b6:37:12:d8:9e:72:fd:1f:aa:b8:27:f6:f9:5e:2d:97:0d:68:
         79:c6:88:39:3a:2c:40:03:2b:da:17:30:d9:7a:07:1d:f0:c1:
         84:c0:d2:d2:04:7d:ce:6c:7c:8f:a7:fa:a7:f8:af:e2:ef:24:
         7b:1b:d6:d0:d1:76:ac:7c:ff:11:eb:60:63:fa:0c:ce:d4:a4:
         69:9e:db:79:9d:50:45:00:3d:b6:24:7a:9c:ec:2c:b2:50:b0:
         30:f1:c7:c7:a8:0d:bf:bf:4e:73:12:28:74:b2:bd:db:f7:0c:
         f5:09:03:31:27:ad:d2:04:44:4e:40:bc:de:35:41:4a:4f:eb:
         4a:f9:65:55:6e:63:40:94:5e:ce:ab:90:45:24:21:ae:aa:dd:
         30:14:38:44:2e:32:2e:ab:ef:10:32:fb:76:19:c3:32:f6:31:
         fd:47:86:49:6c:30:77:7d:59:49:51:82:77:0c:4d:e5:40:60:
         6b:82:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:44 2026 by rpki-client