Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b3704c5-da2b-3b48-bd9e-57bd132932f2.roa
File:                     4b3704c5-da2b-3b48-bd9e-57bd132932f2.roa (raw, json)
Hash identifier:          xJ5DRXH7YokfQEad35vtHFt9rySIycyjLeD3ajPPlWI=
Subject key identifier:   4E:3B:ED:30:30:FA:56:23:8F:63:45:FA:68:50:50:3E:2C:C5:C9:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA19D58408102F8306BEB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b3704c5-da2b-3b48-bd9e-57bd132932f2.roa
Signing time:             Tue 07 Apr 2026 14:30:19 +0000
ROA not before:           Tue 07 Apr 2026 14:30:19 +0000
ROA not after:            Mon 06 Jul 2026 14:30:19 +0000
asID:                     36620
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:9d:58:40:81:02:f8:30:6b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:19 2026 GMT
            Not After : Jul  6 14:30:19 2026 GMT
        Subject: CN=07c05205-6466-476e-a4c9-37c00c5789c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:69:2d:6f:6f:6b:63:5b:d5:a7:12:dc:b4:
                    71:1b:7f:49:d4:e1:5d:23:cf:3e:23:52:34:1e:cb:
                    9f:4b:20:b7:6f:94:b6:4c:b6:50:d6:47:ef:67:36:
                    c4:e4:12:8d:61:f2:f3:75:54:42:d1:96:26:4c:07:
                    5c:c9:4a:94:67:77:27:e2:d3:8f:79:3e:49:d5:c6:
                    3f:a7:8c:28:48:7b:fe:2d:5f:1a:2f:cf:0c:91:07:
                    cb:3d:70:68:a2:8b:18:3d:67:28:1d:2e:84:6b:68:
                    95:aa:c9:3c:5a:0c:f0:08:36:b8:cd:ad:b3:9f:43:
                    dc:ef:9f:84:9b:7c:5b:ab:d2:f9:40:44:9c:9e:74:
                    34:92:23:18:c0:0f:c1:8a:12:fc:0c:cb:fe:e5:3a:
                    80:a5:06:7c:46:88:76:2e:62:3f:ac:f2:7a:d2:1d:
                    50:8d:74:93:ac:ba:a4:16:57:af:9d:ad:18:62:b5:
                    c3:56:aa:b2:c4:6c:0e:a6:e6:9d:3f:7a:82:2f:91:
                    0b:5a:79:0e:ca:aa:cc:2d:05:e7:76:74:06:89:ee:
                    3d:21:dd:e4:6b:87:93:04:74:01:1d:4c:75:19:c5:
                    10:29:30:8b:c4:05:b3:27:2e:89:6e:ac:a1:d2:39:
                    b2:ec:b0:19:93:47:96:0c:f0:98:76:71:bc:1a:89:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:ED:30:30:FA:56:23:8F:63:45:FA:68:50:50:3E:2C:C5:C9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b3704c5-da2b-3b48-bd9e-57bd132932f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:d4:da:c3:95:b7:1f:21:ae:6e:22:d2:a9:7a:3d:7f:76:
         ed:9e:99:61:e7:f9:c3:12:f0:bc:0a:af:10:5a:c6:28:75:2b:
         0e:73:10:2d:3d:93:af:6d:a8:c2:ac:03:c7:99:d4:47:a7:8d:
         da:0a:30:40:0b:03:07:a0:ed:fb:aa:5c:c0:70:f7:66:9c:38:
         68:ef:54:c4:5a:96:06:ca:cc:cc:2b:7e:a0:df:80:5d:74:4e:
         ca:71:55:86:06:e9:80:a4:f9:e0:96:e1:24:f2:d4:64:0f:c2:
         01:1c:93:6f:45:a8:e1:da:15:da:5e:7f:27:df:79:ba:88:a0:
         b8:18:83:0b:28:ea:33:62:51:7f:95:f4:9f:46:be:58:4d:3a:
         91:b8:66:4f:6a:8f:dc:8c:1f:91:4e:52:ee:88:e3:33:3d:4f:
         af:76:99:f7:90:99:b5:36:54:37:de:29:f6:6c:96:ca:c5:8a:
         2c:f5:86:3d:f9:5b:46:48:f8:f1:14:cf:f1:06:fc:7c:9c:8b:
         b5:df:95:e5:98:b1:7a:dd:f9:43:54:2b:86:2f:78:96:79:b1:
         7a:88:b2:c5:cc:f3:03:08:b1:db:d1:e5:d3:77:92:75:b5:46:
         df:16:94:93:96:e4:6a:8f:b3:99:51:f5:60:e7:2f:a6:b1:7d:
         40:d2:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:40 2026 by rpki-client