Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44204ee5-5275-336b-891c-594b683fddf7.roa
File:                     44204ee5-5275-336b-891c-594b683fddf7.roa (raw, json)
Hash identifier:          5Zjr/paQestJ0cm2b8X4zRO4sDmmWbGotIgXZVBiq/I=
Subject key identifier:   B0:78:D1:45:A6:86:0F:24:D0:AE:F5:0D:D3:34:5D:48:0C:21:97:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAFE788B3CEEA484417D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44204ee5-5275-336b-891c-594b683fddf7.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396571
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:fe:78:8b:3c:ee:a4:84:41:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6d9e731b-681c-4ea6-ae46-59eb506f5e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:de:f4:10:e8:c5:5e:62:b2:80:1b:63:60:
                    03:7f:31:ac:f6:ed:a0:a0:55:8a:1b:07:9a:6c:e1:
                    96:10:b9:28:c2:c4:85:fd:83:f4:7f:9e:6a:c0:13:
                    b0:67:a7:3c:05:85:0c:f8:d4:5b:f0:a8:91:45:9b:
                    61:da:dc:a1:c7:b5:d7:bf:d2:2c:73:f9:53:7d:0d:
                    5d:8c:e6:ac:81:76:0c:cf:e9:24:21:49:89:f5:1d:
                    05:37:59:2e:9f:1f:c6:d1:65:34:9c:f0:5e:77:cf:
                    32:48:69:16:d3:0e:93:7b:12:61:f9:d1:0a:bd:d8:
                    89:bb:c3:35:38:46:b1:14:ad:91:e3:1c:fe:1e:c9:
                    fe:9f:9f:01:41:15:74:9a:1f:57:49:69:e4:7b:a0:
                    0c:09:a2:b8:1a:fd:03:98:c2:a8:47:e3:92:cd:5a:
                    f5:4f:8b:5d:7c:fa:ab:0b:5d:00:5c:a7:84:0a:42:
                    da:a1:25:54:83:f0:d8:1d:3a:05:3b:e7:af:36:93:
                    8f:f1:e9:e4:85:81:5a:63:06:6b:a2:26:25:f5:5c:
                    81:7e:10:c7:1c:82:8c:d7:dd:8f:73:a4:88:ae:96:
                    0f:19:fb:1d:e9:5b:f2:45:04:1f:20:34:3f:30:08:
                    09:e7:14:73:11:ce:fb:91:ac:79:d3:62:14:1b:d6:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:D1:45:A6:86:0F:24:D0:AE:F5:0D:D3:34:5D:48:0C:21:97:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44204ee5-5275-336b-891c-594b683fddf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:36:d4:f6:d8:3b:1d:e6:99:6d:a9:22:c6:15:c6:0a:84:
         0d:03:a0:3d:92:47:fe:76:29:3a:67:26:95:8a:35:d6:7d:19:
         76:d7:ea:6c:a0:a3:00:f7:76:ef:f8:ea:b0:81:be:02:73:98:
         18:de:e6:ae:3e:2e:71:66:dd:54:fc:1e:94:53:0d:15:60:4a:
         f1:20:ed:d4:63:32:a2:c1:9a:15:7b:13:e9:69:1e:30:56:00:
         ec:83:31:82:d6:d6:ff:a2:5d:10:88:f0:bb:0b:ed:63:6b:d3:
         2f:c8:bd:35:d3:93:58:3f:3e:6d:0e:7b:3a:47:a1:6e:8e:5b:
         e2:37:fa:ae:b1:9a:56:e5:56:a8:10:27:02:0d:71:02:2d:7c:
         07:55:de:d9:3e:32:78:b2:96:f1:ff:dd:48:a7:c3:b6:47:2b:
         41:80:fc:0a:70:5e:bc:7b:02:fe:cd:f5:58:d1:69:02:29:0c:
         0a:d9:a9:57:d1:73:76:fc:ff:68:87:35:af:4a:52:12:5b:72:
         d5:70:a2:aa:21:34:b7:81:57:63:2b:48:fe:4d:b7:3f:5b:16:
         83:c9:62:94:3e:2f:f0:8b:9c:9c:46:d7:55:86:ed:cc:03:b7:
         ab:dd:fe:24:7c:7a:23:94:e2:6c:a3:9c:bd:88:e7:07:c7:9b:
         69:3b:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:14 2026 by rpki-client