Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa
File:                     395702b1-2a93-30d6-9dfd-40173a9df9aa.roa (raw, json)
Hash identifier:          +1I+fMTa9txFG5QI8qKgT2JYAaHYI76SVwUozBc3B+Q=
Subject key identifier:   7E:2B:6B:3D:23:59:A4:13:84:0A:98:CF:6D:E9:FF:A9:D4:19:A9:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA875B89BB54791AE33380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     36622
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:87:5b:89:bb:54:79:1a:e3:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=befc75d2-36f0-46b7-ada9-8a9c471fe9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:cd:39:47:b3:c6:94:6f:85:93:b6:26:aa:
                    dc:c0:eb:ad:8d:c3:5a:7d:1f:dc:11:e2:40:b9:c4:
                    04:db:19:03:34:15:e2:db:1a:f5:11:47:19:8a:4e:
                    df:1b:ea:7d:26:29:2e:11:2d:79:58:9c:e6:51:a2:
                    79:6c:a1:b7:a0:e8:3c:81:f3:0f:06:24:a2:39:7e:
                    f4:dd:45:0c:cd:24:e9:c2:89:15:3c:48:da:72:ab:
                    ba:ce:21:8d:8b:37:2e:3d:29:fa:14:94:4e:6d:e3:
                    52:96:17:93:b5:36:ea:f1:6c:80:64:a0:cf:25:11:
                    0f:16:6c:a0:8a:8c:90:52:a9:14:fc:37:20:ab:1e:
                    62:cd:27:de:c2:e5:55:31:d3:cb:9c:0c:d6:2b:76:
                    ba:2b:7f:70:1c:3e:33:8a:6d:60:df:0e:9e:3e:7e:
                    e8:3c:25:4e:ad:db:4f:fd:cb:97:8d:1c:41:7e:02:
                    a1:b9:d3:45:1c:9c:ed:55:98:26:b9:e9:83:0c:25:
                    2d:91:28:f7:fa:86:16:9d:b4:7e:3a:f5:42:f7:a1:
                    89:db:58:6b:e8:8a:7e:21:ee:2a:03:b2:ce:db:d9:
                    f7:20:50:df:9e:02:cf:95:92:62:6a:b6:85:92:cc:
                    a3:ba:20:57:e9:e9:cf:4b:9d:24:a2:e2:f2:58:49:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:6B:3D:23:59:A4:13:84:0A:98:CF:6D:E9:FF:A9:D4:19:A9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:c9:e7:c2:3e:0f:85:92:68:24:0b:b6:4d:27:62:98:ba:
         06:af:e6:5a:e1:c5:63:f8:f0:94:50:f3:07:b4:98:cc:1a:6e:
         d2:a7:81:72:81:87:9c:44:ff:d3:97:6d:80:ab:67:d8:ac:85:
         f6:6a:fa:6b:b0:e2:a4:8a:37:8a:62:75:02:21:6d:9b:2e:60:
         04:58:fc:90:f5:78:c8:ee:f2:ef:bf:34:83:f9:63:aa:c8:c7:
         85:b5:7f:61:aa:dc:46:99:a0:0a:05:37:1d:26:38:e6:82:3b:
         69:6a:af:25:c4:88:ad:ab:75:66:7b:b2:63:e8:3e:74:12:e8:
         26:1c:20:48:75:84:a8:98:c0:cb:eb:3d:be:18:dd:9a:36:e5:
         82:21:50:a0:2e:a0:d5:cd:31:9b:ee:8d:ad:7e:57:8c:96:af:
         94:58:50:83:9a:4c:d4:6f:c1:e4:0f:4d:44:03:bd:8d:17:23:
         66:8b:7d:8e:aa:a4:1a:d9:b7:c2:18:38:9d:b5:c6:74:ba:da:
         3e:ce:a0:23:12:83:1c:8e:2b:21:68:d0:45:f5:40:b8:a0:67:
         00:a6:cc:c3:b1:3c:aa:a1:cc:d4:ba:dd:84:96:67:1b:30:a8:
         bf:f0:a5:05:dc:fd:04:fb:f3:ef:52:55:75:08:eb:f5:f9:2a:
         23:3f:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:30:51 2026 by rpki-client