Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc522b3-b9d2-3f30-ab22-b17633b2d8b6.roa
File:                     4fc522b3-b9d2-3f30-ab22-b17633b2d8b6.roa (raw, json)
Hash identifier:          fTU8ODQjuCn8i0Q1sVIBDXxVumnHdtuQES+pwPR1IXo=
Subject key identifier:   18:64:FC:D7:B8:EC:F4:EF:98:37:F4:E9:E8:75:E7:0F:04:CE:D2:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA18C05DF6FFD8932E58900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc522b3-b9d2-3f30-ab22-b17633b2d8b6.roa
Signing time:             Tue 07 Apr 2026 14:30:11 +0000
ROA not before:           Tue 07 Apr 2026 14:30:11 +0000
ROA not after:            Mon 06 Jul 2026 14:30:11 +0000
asID:                     36617
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:8c:05:df:6f:fd:89:32:e5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:11 2026 GMT
            Not After : Jul  6 14:30:11 2026 GMT
        Subject: CN=daaf192a-20ac-4828-8462-ca912e25189c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:35:14:53:c7:f2:6d:22:db:4a:e2:39:df:
                    d2:e2:e9:c9:c5:58:0f:4b:1d:dd:5d:86:5e:d8:33:
                    36:9f:d9:23:e4:cf:93:0e:3d:43:7d:5b:66:d7:a3:
                    dd:33:39:ce:bc:69:4b:02:9a:1d:b2:d6:7e:d2:9c:
                    eb:2d:be:10:d0:cc:43:c3:0e:08:6d:de:93:10:3d:
                    0e:ec:dc:53:26:d8:ce:8c:3c:da:90:4c:7e:c6:a3:
                    bc:4a:9d:7a:43:f7:7e:84:55:0c:a3:a2:f5:48:94:
                    41:3c:54:c9:33:d0:07:ac:88:fb:e5:94:a6:37:55:
                    fd:b4:d7:40:5c:a3:21:0c:72:d4:82:6c:b5:44:6a:
                    c2:46:ac:17:94:7c:2e:7a:c7:f0:ab:47:8e:96:82:
                    20:26:ed:df:bf:80:12:85:aa:5d:49:24:52:92:2a:
                    a4:85:65:5a:c0:e0:62:54:0c:80:7e:ba:de:4d:d9:
                    e9:13:d8:4e:fa:7f:90:ef:99:b8:88:31:9a:40:d3:
                    3f:09:67:37:9c:f0:d6:c5:fb:14:70:2e:4d:65:47:
                    9e:91:90:e4:2a:6f:29:80:aa:09:0c:32:82:5a:de:
                    e6:96:ed:26:6c:8e:48:c8:d3:5c:97:03:79:45:01:
                    02:f1:bf:7c:37:7d:5b:08:51:b6:aa:65:9c:39:f0:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:FC:D7:B8:EC:F4:EF:98:37:F4:E9:E8:75:E7:0F:04:CE:D2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc522b3-b9d2-3f30-ab22-b17633b2d8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:49:1a:c0:11:82:c1:6a:6a:80:d4:84:f5:f1:5a:c5:0c:
         1a:0d:9b:f9:7e:02:8b:57:75:45:f1:66:2b:f7:e5:44:f0:06:
         a3:23:d5:88:54:1b:e3:2a:f0:db:e5:09:2f:8b:b9:0c:8f:af:
         00:87:7a:1e:2c:90:08:2b:5a:56:1a:19:5b:1f:3f:c9:97:76:
         a9:7b:1f:d0:1c:b1:61:38:87:f2:39:41:06:31:b8:b7:f4:a0:
         b9:98:60:bd:c7:30:65:c9:64:e7:e5:66:c8:e7:ab:ab:23:09:
         83:5a:a9:cd:e9:8d:6b:2e:1c:a9:18:2e:3a:af:7f:08:52:dc:
         eb:53:2b:6a:0d:29:e0:35:d8:e2:5d:c1:cc:44:04:f1:01:c8:
         f4:4f:16:29:6f:4e:62:87:6f:bd:31:a4:50:d6:8e:63:f1:ae:
         76:6f:3c:91:f5:08:65:17:24:ea:7c:91:b8:4e:94:fe:c4:27:
         cf:c5:13:ce:75:39:2b:d2:cd:5a:94:97:b6:ba:7b:7a:b3:bc:
         12:f0:ef:9f:7b:dc:7d:5e:b9:2f:22:da:74:82:18:38:48:fa:
         5c:6c:b3:eb:3c:b2:6c:b8:42:73:c3:a3:c9:d0:27:af:e7:81:
         60:ba:ef:ad:f1:cc:c5:4a:3e:75:bc:c6:e7:e1:2a:1c:6e:37:
         07:5b:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:58 2026 by rpki-client