Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58699bba-e11a-3a56-bb38-f353bdae554b.roa
File:                     58699bba-e11a-3a56-bb38-f353bdae554b.roa (raw, json)
Hash identifier:          tyVHLPGR/VeuFVDrgiS79X86lET90dcXAQH8uVh2hgs=
Subject key identifier:   70:B9:5A:5A:AE:34:9B:A1:5E:DE:CC:DD:55:3C:D6:C6:34:35:18:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA76BB75BE1FBCDF422CF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58699bba-e11a-3a56-bb38-f353bdae554b.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396575
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:76:bb:75:be:1f:bc:df:42:2c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=25fd5983-b58e-4295-8388-f1ad12b4c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:3d:e9:28:7c:b9:df:31:74:7a:36:50:5b:
                    76:96:e7:5f:1a:34:79:ef:d5:4a:78:ee:d6:99:98:
                    4d:df:29:ad:56:8e:12:4b:0f:04:c0:4c:35:9f:a7:
                    c2:2e:5a:19:fe:9c:72:b1:10:bd:1c:ee:1a:89:38:
                    c7:f0:2f:d0:13:d9:3b:2e:b7:ff:bf:58:34:df:64:
                    3f:60:a5:a7:cb:75:d5:83:ba:27:63:ac:91:06:5f:
                    39:f5:53:01:37:57:de:ae:8b:29:b9:d2:9c:f4:2c:
                    94:b0:ec:62:ae:29:25:da:04:88:5c:27:74:35:1e:
                    b4:b1:38:de:4a:df:0d:a0:ef:93:eb:89:e1:b1:ce:
                    a2:28:21:20:89:40:40:8c:df:d6:45:40:6d:af:75:
                    1a:69:e0:14:60:ba:55:6d:d7:49:33:0a:06:52:44:
                    66:ff:80:b7:83:2e:0f:99:9c:44:90:77:e5:26:03:
                    69:2a:6e:a8:43:25:f6:dc:dc:c0:54:a5:14:54:0a:
                    7c:d6:ee:a7:71:9b:5a:b7:d1:8a:8b:a1:81:12:0c:
                    e7:80:31:5a:8c:da:bd:3d:5a:9d:33:f5:02:8c:75:
                    6d:76:1e:3e:bf:5c:75:9d:e5:aa:39:22:e5:71:1f:
                    b3:db:0b:9c:77:66:c0:8a:89:fa:a6:70:18:e5:9d:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B9:5A:5A:AE:34:9B:A1:5E:DE:CC:DD:55:3C:D6:C6:34:35:18:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58699bba-e11a-3a56-bb38-f353bdae554b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:a3:98:a1:55:15:1e:44:04:27:75:11:14:59:ab:7e:4a:
         65:30:28:4c:58:c5:98:54:8f:44:d6:1e:aa:a2:81:29:b4:c9:
         7a:eb:54:93:c4:9b:01:0e:4e:0c:16:70:e3:7e:0d:69:8e:0d:
         1b:45:48:dc:42:71:42:ca:8d:2e:ae:7a:0d:69:6b:e9:bb:51:
         d5:f4:80:8b:59:bc:0a:67:aa:39:42:d1:51:e7:ce:e4:07:4f:
         07:25:f8:46:51:f8:02:3e:f4:3b:5e:cd:50:5f:b6:b6:48:c6:
         c4:68:67:2f:e3:0f:d5:20:95:4f:92:a6:de:a0:13:1b:a6:28:
         61:90:a1:29:9f:f1:4c:8a:82:18:a0:ea:b9:c8:38:b3:64:f1:
         b6:58:0a:d4:2a:5d:4f:31:3b:cd:2e:ff:ae:78:8f:79:ad:49:
         1e:a7:ca:df:04:a0:a3:72:f1:a2:a6:67:bd:4b:c9:ac:23:da:
         f7:7c:55:bc:02:45:6c:dd:36:af:80:c9:e1:02:81:64:eb:47:
         ee:59:4e:0c:6a:48:45:28:9e:66:e6:ba:4d:de:cc:1d:51:a7:
         0d:56:d0:09:d5:46:fb:2f:ef:7b:79:34:6a:66:4c:19:e1:97:
         f5:e0:38:1f:83:de:6a:2d:09:cd:c1:d3:80:a6:43:b9:ba:90:
         2b:95:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:58:57 2026 by rpki-client