Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588162af-4a5d-34f3-be0b-382b48306117.roa
File:                     588162af-4a5d-34f3-be0b-382b48306117.roa (raw, json)
Hash identifier:          fYJ7V6BvIVOYkRAq/QITBREHFRF+eyaB7BlL24Gnouc=
Subject key identifier:   96:29:92:2F:A2:0D:DE:D9:08:C4:64:FD:4C:95:CA:B7:BE:51:9D:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1910B2B029CEEB308FDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588162af-4a5d-34f3-be0b-382b48306117.roa
Signing time:             Tue 07 Apr 2026 14:30:13 +0000
ROA not before:           Tue 07 Apr 2026 14:30:13 +0000
ROA not after:            Mon 06 Jul 2026 14:30:13 +0000
asID:                     36620
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:91:0b:2b:02:9c:ee:b3:08:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:13 2026 GMT
            Not After : Jul  6 14:30:13 2026 GMT
        Subject: CN=1e01ed2b-b1ed-4956-a59c-29adcfb46360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:ad:80:ef:83:e4:69:3e:d0:76:35:3b:4f:
                    5d:26:59:76:67:6b:80:cd:07:e7:48:bf:df:10:0b:
                    d6:0c:c5:1d:c5:b7:c3:8e:61:84:77:b8:ae:54:18:
                    32:53:25:67:bf:05:44:00:3d:49:6d:0c:3e:98:73:
                    03:ae:e4:5f:f1:b3:34:01:c8:df:6f:23:49:cd:ab:
                    bd:0c:04:62:89:aa:a1:74:c6:a8:d2:4d:fd:e5:2a:
                    65:d1:56:22:a2:d7:c5:67:ea:d5:7d:81:a3:58:4a:
                    fd:17:33:85:a7:f6:d8:b2:07:69:0f:9d:0e:9d:cf:
                    26:df:b6:ef:67:af:81:e3:34:15:f8:db:72:a8:6f:
                    c7:30:06:dd:67:05:24:f4:fe:d8:8b:44:78:d9:0b:
                    f2:d2:90:ec:ab:57:cd:dd:0e:35:cb:4f:bd:96:37:
                    c9:be:a2:54:5f:3b:3b:e8:c9:0f:87:19:6c:a9:ac:
                    74:f7:f9:ce:8b:0d:ad:22:7b:7f:08:f0:09:76:a2:
                    7b:9b:1e:8f:2f:ef:15:69:d9:f2:88:9e:d0:69:fb:
                    08:0b:2d:82:a3:c2:8f:05:0b:dc:c5:38:2c:d4:be:
                    4e:20:b0:c7:cd:c8:14:4a:d7:cd:ef:83:29:a8:a5:
                    5f:f3:2e:b2:d9:30:ac:5b:45:67:f3:09:9b:80:6a:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:92:2F:A2:0D:DE:D9:08:C4:64:FD:4C:95:CA:B7:BE:51:9D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588162af-4a5d-34f3-be0b-382b48306117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:7c:78:a2:40:2a:f2:f9:80:8d:9d:fe:cf:97:4a:52:9e:
         e9:9d:5c:83:75:08:4c:d0:b8:88:93:ad:1e:32:3d:b6:ce:cf:
         99:a4:ad:50:97:53:a4:c6:20:a7:09:56:f2:60:28:98:bc:0d:
         57:30:e0:37:ca:f0:11:db:98:0b:df:10:59:8d:b7:a6:64:f4:
         d6:3b:8e:f1:a0:88:b2:e6:fa:f0:6c:a6:67:f9:1a:f5:f1:7d:
         ed:f6:da:67:b1:5d:fd:e3:aa:46:5f:55:e7:2a:ea:6f:ad:28:
         d4:f2:8e:2f:5e:e7:56:e4:bb:8b:e3:39:a6:74:3c:55:da:df:
         b4:ca:fd:cb:3d:86:91:9e:ef:f1:3a:fa:52:34:9f:82:ce:76:
         1f:b8:84:69:9d:6e:e4:d0:b7:ee:d1:5c:04:2c:c3:eb:d7:88:
         31:dd:aa:1c:ad:2a:d7:5f:fd:38:30:e1:40:79:76:01:8c:46:
         55:73:c4:2b:0c:ed:fd:59:d3:7f:3c:a4:79:0d:91:74:4e:af:
         19:b1:82:d7:02:fe:05:d9:d1:fb:0a:60:2f:cb:95:be:01:5b:
         67:f7:a1:0a:aa:0e:09:c4:bb:29:ce:48:a9:85:b7:d4:9d:ea:
         80:e2:7e:e9:47:1e:ab:72:c5:20:19:a9:4a:84:61:28:0e:f0:
         7a:63:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:38 2026 by rpki-client