Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
File:                     3c383d79-0bba-3042-a2c6-1f2051c49407.roa (raw, json)
Hash identifier:          866dxQKYbmkNvSEPc04d8fEBrleULRsahHEN9BScN3Y=
Subject key identifier:   37:79:5E:C5:9E:3C:54:C4:8F:87:36:BB:AD:55:DB:72:B3:04:07:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF4FAD9006D29EF00DF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396560
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f4:fa:d9:00:6d:29:ef:00:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=00a9e075-fe4e-4480-9163-e398ed082273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:04:58:d5:ca:3a:aa:be:75:23:21:bb:d9:
                    e2:e9:0b:51:a5:f3:44:c9:aa:09:25:6f:4a:2b:a2:
                    b7:04:a8:04:b2:cb:f1:44:91:45:db:54:1b:82:20:
                    d2:31:76:0c:bc:78:18:85:ac:4c:c1:24:c6:c9:91:
                    73:51:29:f5:58:be:e5:f0:3c:6a:1e:59:a7:92:e0:
                    fe:b5:26:4a:92:1c:e3:9b:80:54:3e:57:a3:59:f5:
                    de:d8:cb:29:8c:f4:59:a4:14:3d:f9:4d:4c:23:18:
                    10:c3:bd:66:07:d7:04:26:a5:15:49:14:d2:de:07:
                    54:aa:85:c6:34:40:7b:ec:36:d0:b0:3b:34:6a:0b:
                    bc:75:d6:4d:54:3a:7f:d0:61:c8:ce:38:40:c5:5a:
                    0c:51:81:4d:c3:b8:09:b8:18:eb:00:0d:83:51:00:
                    c2:06:4e:fe:83:b6:05:ab:87:91:d1:df:69:99:66:
                    f0:ce:27:34:39:63:dc:3b:9b:80:22:2f:b0:8d:a9:
                    57:ac:b1:e8:57:d6:33:af:7b:a1:3c:89:5d:ed:8e:
                    77:00:19:a7:14:cf:3b:0c:33:d4:77:58:95:a5:5e:
                    2c:d8:dc:7d:fb:5f:b6:6b:ea:61:78:e4:af:c5:03:
                    08:eb:60:60:c1:ca:2e:5f:bd:19:c2:c3:a7:0a:70:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:5E:C5:9E:3C:54:C4:8F:87:36:BB:AD:55:DB:72:B3:04:07:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:a6:49:fd:87:fa:1a:48:2e:90:fc:64:67:b4:69:f1:2b:
         b8:17:03:f4:f7:15:62:59:c0:78:e3:f9:2b:81:eb:00:81:7b:
         7e:1f:1f:0c:d1:11:83:80:fc:54:12:64:74:87:8d:20:f2:48:
         55:2e:68:86:ec:0f:f9:ce:2b:0f:12:82:c3:8a:a3:94:ac:f6:
         b7:39:bf:2f:fd:5f:d0:26:7e:d3:59:f6:88:2c:5c:fc:38:2f:
         4c:b1:29:65:52:c6:de:95:b3:99:0f:cd:70:17:db:21:b0:c4:
         ab:11:07:f5:1a:6d:7e:48:64:3d:1e:77:ae:b7:44:98:86:3d:
         2f:da:47:11:c6:ed:59:5f:bd:c1:13:dc:ee:20:78:91:b8:81:
         83:d9:49:16:7e:12:ad:d4:14:3f:d2:74:07:4f:e5:2c:83:c2:
         87:c9:f9:e3:af:b2:aa:20:e5:d7:19:d7:a8:71:ef:57:73:6a:
         d3:70:3b:fb:3c:df:f2:7a:ab:98:2e:89:c2:3c:92:9c:09:02:
         ea:a4:8d:c3:01:8b:44:91:ea:11:8e:7a:b0:dd:91:3b:54:14:
         0d:9b:b0:cf:4c:76:ff:bc:e0:92:ff:01:76:e7:c4:22:7d:aa:
         1e:49:21:a9:b1:15:ce:3f:8b:43:85:27:db:31:82:41:63:8f:
         8a:b0:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:16 2026 by rpki-client