Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4abbf534-c131-39f7-b8b9-222277e4670c.roa
File:                     4abbf534-c131-39f7-b8b9-222277e4670c.roa (raw, json)
Hash identifier:          Nl/x9RQBAByzv9k3wLVVQ6XROV0ItMvaFm5pW7UgKjg=
Subject key identifier:   0C:CA:A6:C5:65:91:9D:FB:C3:9D:06:2F:30:C9:61:08:FD:B5:7B:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7937EB2A3BC8F7D0C880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4abbf534-c131-39f7-b8b9-222277e4670c.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     397205
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:79:37:eb:2a:3b:c8:f7:d0:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=4b20fcfa-c5d8-4deb-9061-f773758dc5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:24:d4:e8:4d:36:1a:30:73:8e:8f:5b:61:
                    f7:53:42:41:aa:3b:01:02:41:9a:2f:e8:f3:8a:74:
                    74:9f:ba:63:4e:30:ae:23:3d:61:96:64:17:3d:68:
                    ec:43:8c:46:d2:5c:4b:d1:75:03:7c:bd:1b:53:70:
                    b3:9d:9b:20:57:f2:77:4c:1d:22:a2:da:eb:b9:5a:
                    08:a6:35:e7:fe:c4:db:e2:64:64:5c:0f:27:14:0f:
                    f2:25:db:cb:93:93:9b:13:e2:93:7c:61:ed:7a:6a:
                    25:90:c4:a1:e1:2e:34:c8:21:ff:ff:8d:0b:9f:84:
                    2d:54:86:9a:b6:c1:1c:ad:24:ae:41:82:51:5d:4e:
                    98:43:76:6d:5b:81:58:34:b8:aa:93:10:0b:19:94:
                    b4:f9:86:f6:65:d6:c5:c3:df:ea:e8:18:25:bb:73:
                    98:4e:4f:63:1b:46:58:29:98:80:09:60:ac:d3:16:
                    43:f9:01:e0:ed:04:f4:90:53:bc:49:b1:2d:aa:ca:
                    39:07:52:2d:09:46:94:df:e9:a3:53:f0:7f:bd:51:
                    57:f7:88:42:d6:7e:93:59:07:cb:21:e7:5f:6b:66:
                    94:b2:3e:a7:45:fa:fc:6d:12:3f:44:6a:f7:07:75:
                    44:dc:2d:5a:d4:05:a8:57:83:6b:32:4b:e1:6f:e7:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:A6:C5:65:91:9D:FB:C3:9D:06:2F:30:C9:61:08:FD:B5:7B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4abbf534-c131-39f7-b8b9-222277e4670c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:27:23:d5:f4:b1:5c:f9:bc:32:80:ef:30:7c:53:23:2f:
         5c:9c:a7:75:6d:95:a1:45:b5:47:12:5b:39:ad:e2:e9:b3:45:
         cf:8a:63:2c:00:1d:f2:15:60:66:6d:d3:30:f8:86:2e:66:5e:
         12:87:55:cf:f3:22:3b:0b:98:b2:ec:86:1a:c5:17:cf:ea:a4:
         93:16:77:e2:41:30:f2:5a:71:5c:90:a7:9c:15:1b:6f:40:7d:
         1a:1a:34:00:9f:db:d6:98:70:11:29:8f:ff:f1:70:d1:50:02:
         4b:9c:96:ee:f4:a9:34:13:0c:7b:55:28:ab:71:1b:31:ed:11:
         4f:fe:c8:ff:3e:91:e0:ca:3e:78:38:77:74:df:da:b7:e4:39:
         bc:50:df:87:d4:65:6e:9d:92:a8:28:b4:31:79:65:9e:fd:77:
         52:83:38:01:e8:61:d7:98:cb:95:8a:a8:d5:e0:c4:51:65:cd:
         32:f6:a3:1e:12:98:fa:4a:6e:1c:98:d5:6f:ae:90:3e:23:43:
         67:d8:28:a1:35:d3:9f:14:ad:ff:2b:ba:1e:75:a0:c0:74:8d:
         3e:8e:cc:bb:a6:a1:31:2c:6e:31:3a:5b:4b:1b:9f:ed:ab:22:
         53:79:2e:7b:33:e6:2d:4f:2d:37:10:07:dd:7e:28:6d:65:5e:
         d2:1c:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:19 2026 by rpki-client