Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa
File:                     5693ddaf-862c-3eab-933e-286d3ed8f589.roa (raw, json)
Hash identifier:          KJ4XOD41hUFY/QViCDuzJPVeNOV5d13ZwP614JaYzkE=
Subject key identifier:   30:B0:54:70:F0:A9:05:CF:A7:A8:F5:74:1E:D7:03:21:B1:BD:E8:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A05498BAB29BFB41AE9CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     396555
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:49:8b:ab:29:bf:b4:1a:e9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=8962c5a7-43a4-4beb-ae72-cfbbfd086930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:70:9a:74:2d:e8:68:af:a5:47:81:e1:30:
                    00:de:16:d3:71:b6:36:9d:3f:25:a2:92:89:23:28:
                    25:7c:e4:9d:42:8b:29:eb:90:b4:7b:0d:f2:67:89:
                    90:f4:f4:35:87:c7:e0:5c:17:cf:5a:f2:ff:7e:75:
                    7c:e2:56:0f:64:33:56:ae:1e:69:b4:18:81:eb:fd:
                    55:86:4f:32:2b:b4:65:09:cf:69:f6:7e:62:a4:23:
                    2f:b8:73:4e:34:9f:d6:f2:1a:57:99:8d:b4:31:a3:
                    18:13:1c:5f:17:f1:db:2d:a0:9e:e3:89:03:0a:ed:
                    58:50:10:84:45:9c:7f:3f:c0:8d:61:a4:60:35:c0:
                    f9:b8:08:e1:2d:75:d9:f4:4c:41:34:37:90:48:37:
                    98:c4:d9:df:3e:fc:22:a0:04:33:a4:46:48:bb:2d:
                    1e:a4:30:35:f3:d0:45:a6:62:0f:c0:c8:0d:61:30:
                    74:fc:26:2d:68:25:3c:d1:01:7d:09:73:79:f3:f9:
                    4e:9c:2a:72:38:cf:db:12:db:42:8c:b0:56:11:1c:
                    db:10:63:df:46:e2:01:38:ee:c6:6b:16:5d:b2:84:
                    96:f1:80:df:41:96:85:c9:de:28:16:6c:5f:2f:1f:
                    99:1f:ed:de:3b:0d:7a:fe:22:9c:61:8f:66:cd:b0:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:54:70:F0:A9:05:CF:A7:A8:F5:74:1E:D7:03:21:B1:BD:E8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:be:1c:5f:23:91:ea:0f:3a:61:0f:33:1a:cc:e3:d7:6f:
         6a:16:16:01:51:32:4e:81:4e:6b:c1:81:f6:0a:13:88:31:c6:
         06:ed:92:09:17:82:3d:f6:2b:2e:66:b8:91:d6:e7:a7:9c:c8:
         6d:83:35:7a:f6:24:d6:9c:28:be:8c:42:c8:e5:3e:6f:93:a5:
         f9:18:80:88:c7:1a:5b:ad:4b:8f:b7:47:0a:cf:77:c2:98:2a:
         a2:21:31:c2:0a:83:2e:2d:b5:fd:3b:49:dc:5e:2d:c8:b1:85:
         53:1a:97:ff:1f:3f:12:ca:c3:3c:4c:a4:df:b9:6b:5a:72:bc:
         70:b4:c6:74:9a:90:17:f8:68:4b:94:7b:1a:c5:b0:20:88:8a:
         85:c8:ea:d9:44:f6:1b:cc:9e:8b:11:d2:c3:7b:45:ec:55:bc:
         32:1e:f3:f2:b0:ae:5f:d8:bf:8d:08:7c:65:cc:7c:ae:47:2a:
         7f:a4:06:ca:e1:7b:b2:0a:f8:76:d4:47:3d:0d:a5:42:94:a7:
         7a:2a:51:a9:41:24:7d:1c:9d:22:c1:e0:a2:29:10:79:3c:1d:
         6e:93:96:02:c0:a7:db:da:11:fc:3a:41:7f:c4:88:58:5a:36:
         0c:3b:c7:3d:f4:15:2e:6d:4d:49:95:c4:aa:6c:f8:45:63:6b:
         05:3c:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:54 2026 by rpki-client