Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580c14ac-daf4-3772-bf20-3d63322906c3.roa
File:                     580c14ac-daf4-3772-bf20-3d63322906c3.roa (raw, json)
Hash identifier:          I+9HCMYVsXsH67QGX77HLUOR6SkDNHgU94/8PYmRFPg=
Subject key identifier:   77:C7:28:FA:50:0C:7A:06:E4:4D:38:99:80:9A:1D:78:EB:D4:1E:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA8735B4B90FDCE5B654000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580c14ac-daf4-3772-bf20-3d63322906c3.roa
Signing time:             Thu 02 Apr 2026 14:22:47 +0000
ROA not before:           Thu 02 Apr 2026 14:22:47 +0000
ROA not after:            Wed 01 Jul 2026 14:22:47 +0000
asID:                     396603
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:73:5b:4b:90:fd:ce:5b:65:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:47 2026 GMT
            Not After : Jul  1 14:22:47 2026 GMT
        Subject: CN=0aeea132-5e67-48ea-9e67-fddd08e684e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:0e:99:13:22:70:61:3e:04:ec:42:67:ea:
                    a5:14:2a:9c:a2:c5:a9:e4:2b:bd:86:18:6f:fa:43:
                    d2:b8:b4:44:e7:32:fc:21:17:a0:20:ab:ae:c0:a1:
                    65:0e:47:65:40:09:85:58:72:96:a4:58:83:83:33:
                    d4:d2:92:10:a0:46:4e:15:37:f0:45:8f:16:5d:cd:
                    35:ae:1d:0a:18:1e:34:72:1f:cd:8d:c9:30:52:ce:
                    6c:19:19:3c:2a:ce:7f:00:2b:ed:be:67:1a:db:41:
                    fb:38:da:57:cc:4a:15:22:9d:d8:7a:38:a4:98:6a:
                    80:a3:55:3e:b6:16:28:41:ab:30:52:44:b9:36:aa:
                    eb:ba:eb:70:06:74:a3:bd:bb:72:45:06:a7:a5:11:
                    c7:a5:68:2d:9b:84:34:46:51:5b:f0:d5:6d:24:ca:
                    6a:0c:cf:11:3f:c2:0b:fb:77:ff:47:59:40:1b:9e:
                    91:1e:88:1a:ac:47:43:cb:4b:b5:d0:08:86:3f:da:
                    c2:d8:fe:a4:77:8e:37:cd:8b:50:e7:0d:f7:79:12:
                    a3:a9:46:19:ae:82:fe:13:e1:08:1c:48:eb:b5:2b:
                    1d:8d:e8:9a:41:de:93:23:8d:e6:70:9a:d8:b6:44:
                    37:b1:0a:d8:f7:3f:b9:5e:d3:62:86:75:67:6a:06:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C7:28:FA:50:0C:7A:06:E4:4D:38:99:80:9A:1D:78:EB:D4:1E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580c14ac-daf4-3772-bf20-3d63322906c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:99:9b:ce:88:dd:76:30:46:e0:03:2a:65:90:ab:e8:d2:
         34:52:d2:4e:1f:3f:f7:d0:6c:a8:6d:71:49:9c:27:f1:d3:a9:
         f4:fb:d7:60:c6:41:24:bc:02:a6:bf:c9:34:54:5f:34:af:d3:
         4e:80:15:db:f3:89:3c:21:14:9e:f1:ab:c8:74:df:a1:8d:82:
         4f:09:b9:1e:b3:0c:b4:ee:3b:d5:89:93:61:4a:b0:6f:58:84:
         6d:81:ad:59:f5:d1:20:4c:51:db:88:08:08:c9:c1:39:2f:67:
         05:39:c4:4a:4b:be:53:13:25:5c:e1:e1:ce:df:a7:a8:e2:d1:
         6b:9a:f6:75:06:e4:80:c9:36:86:13:12:14:51:77:6e:45:6b:
         96:ce:07:db:7d:97:f2:04:ef:bf:d7:3e:cb:bd:65:46:cc:50:
         0b:97:af:e5:68:81:8f:cd:55:a9:12:5d:d5:78:08:db:9a:d8:
         6f:a7:d4:43:5f:24:a3:e9:74:11:b4:f2:88:b5:6c:23:cb:95:
         db:68:d0:bf:cc:92:e3:0d:91:45:7c:68:bb:6c:f2:76:d7:1b:
         79:5d:f2:5c:cf:2c:6f:4e:9b:15:80:7b:a6:62:14:a8:49:39:
         d0:59:b7:9a:86:5f:8f:11:ea:bc:35:95:d2:19:dd:1b:0e:b4:
         03:87:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:12 2026 by rpki-client