Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa
File:                     4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa (raw, json)
Hash identifier:          6ObT2p4wG5kF7XjFYFfDoWtv+Bf7b1fPAwR+uRpLOe4=
Subject key identifier:   43:BA:2F:5B:45:03:5D:F9:70:2F:DB:45:6D:D6:5C:B0:E0:29:51:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA79A67E29FF6F93B11C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     20172
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:79:a6:7e:29:ff:6f:93:b1:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=d5614fd8-b97d-409c-a453-330f006bdd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:e3:ad:e2:c9:4b:64:6c:6c:d2:2b:26:4d:
                    2e:c2:85:af:56:ae:a4:b7:34:b5:11:88:cc:bd:9c:
                    89:ba:78:7e:70:88:f3:9b:a7:6a:6e:f6:68:f4:eb:
                    a7:f8:a0:f3:98:3f:f7:2b:c5:25:40:74:58:65:86:
                    87:43:72:ed:73:38:6e:af:bc:67:83:33:21:96:15:
                    60:97:28:21:1a:d2:11:c1:b8:5e:13:7b:30:cd:b6:
                    a5:36:f2:b8:09:5c:5f:2c:fa:0d:bb:e3:32:9e:05:
                    ce:fb:77:d5:37:21:4f:a6:14:1a:8d:57:92:4b:46:
                    dc:03:88:5e:3c:5a:7c:b7:a3:49:97:75:72:c6:16:
                    7e:2d:7f:c4:44:70:63:72:ab:14:7c:6e:53:6a:d8:
                    13:23:6e:b6:8e:9f:1c:9c:c4:a2:10:1b:3b:8d:d1:
                    0d:44:65:d7:52:11:37:1b:9e:88:d8:de:91:8c:7a:
                    97:ce:62:e1:a4:20:db:f7:18:d4:9f:ac:f6:ea:f4:
                    3c:6f:b5:fd:be:39:41:4a:d1:9a:25:2a:9b:40:5b:
                    7c:33:67:b2:5f:71:cd:ef:99:85:ad:56:25:46:79:
                    65:f3:16:00:72:ad:95:19:ed:57:c6:89:91:8c:5a:
                    33:f0:76:7d:b8:27:cb:8e:9f:c7:41:ff:21:d1:a0:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:2F:5B:45:03:5D:F9:70:2F:DB:45:6D:D6:5C:B0:E0:29:51:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d6:b8:1e:48:ff:88:d8:ca:a9:e8:8a:7a:c7:5e:e2:27:20:
         fb:6a:a6:6b:b0:00:69:cb:f7:cb:df:fb:48:8d:3e:ed:2f:1a:
         a7:c9:8a:e5:74:cb:eb:49:b1:80:c5:98:f5:5e:90:e8:f8:46:
         33:0f:9f:4e:45:46:41:c4:ed:1f:fc:85:88:f7:e6:f6:a4:98:
         67:91:27:4b:43:ff:9c:91:d0:d2:7d:df:77:de:b9:1d:37:55:
         fe:f1:ee:10:b2:93:f0:7a:07:93:f5:8e:80:b1:34:5c:6f:d0:
         68:cb:37:08:e1:31:54:38:1b:3c:3d:44:73:fa:7e:d8:85:76:
         31:80:81:ec:01:2f:5c:4a:ce:12:54:f8:cd:d1:85:2a:2c:5d:
         9f:41:29:1c:b9:8e:b1:e3:d9:59:36:2d:75:7d:92:ee:18:a3:
         80:63:2c:a7:a1:03:dc:60:69:60:1b:dd:3b:ce:27:d6:a3:21:
         67:9c:ba:7e:4e:84:13:11:c8:2d:78:66:e7:39:00:01:76:78:
         46:11:09:70:81:b4:ed:a9:2e:45:eb:6e:d6:ed:55:b8:2c:22:
         48:9a:bc:83:c7:a0:0d:f4:6f:78:37:e4:62:03:75:9c:57:a2:
         d8:97:c7:a2:74:52:06:1a:39:d0:15:97:1e:05:52:af:f1:f7:
         0f:91:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:19 2026 by rpki-client