Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c43559-dffc-3f07-a378-f78fb831b1b7.roa
File:                     58c43559-dffc-3f07-a378-f78fb831b1b7.roa (raw, json)
Hash identifier:          S5ceMnD369H2Oaw2eg0cBXgE9Eg+NTQxdLpYENbw/3k=
Subject key identifier:   AD:FE:B1:C8:36:28:E9:D1:55:29:1F:55:E6:A4:09:25:35:3A:13:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1898B0D8F0AD197148080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c43559-dffc-3f07-a378-f78fb831b1b7.roa
Signing time:             Tue 07 Apr 2026 14:30:10 +0000
ROA not before:           Tue 07 Apr 2026 14:30:10 +0000
ROA not after:            Mon 06 Jul 2026 14:30:10 +0000
asID:                     396575
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:89:8b:0d:8f:0a:d1:97:14:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:10 2026 GMT
            Not After : Jul  6 14:30:10 2026 GMT
        Subject: CN=fb1c0dac-a3f4-4d62-8837-b58dfeccad29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:06:03:dd:e5:60:37:ae:c3:12:21:b7:0b:
                    2a:f6:4c:fe:6a:d0:90:f5:07:12:b0:1d:3a:27:c6:
                    23:69:5f:65:e4:d7:11:ef:e6:cf:b4:fb:75:5f:53:
                    b3:d8:8c:84:7c:09:55:f2:b4:d7:9d:f0:26:02:2f:
                    81:54:ff:c3:46:31:89:cd:9e:77:80:7e:73:9a:52:
                    c1:24:f4:e2:c9:d5:f5:13:b0:e4:8c:bc:0f:77:8f:
                    e1:90:d6:20:6c:39:e6:fa:d4:6a:91:41:97:cc:70:
                    80:be:a0:4d:25:07:73:19:d8:21:7c:00:30:d0:fb:
                    54:ca:c4:9e:6b:3d:26:57:ed:6e:06:4f:e4:c7:0e:
                    5a:9f:a3:d6:b7:d9:00:94:30:00:b3:9a:77:fc:b7:
                    b8:b3:9c:0e:0c:56:5e:24:09:fd:e9:2e:ee:13:61:
                    93:5b:d3:e2:de:1b:83:93:a5:8b:ac:95:d3:31:34:
                    08:c0:5e:34:0e:fd:f8:ec:ac:8f:a0:8f:ec:3b:53:
                    c0:3e:d3:0a:1d:0d:32:29:29:e5:b8:c4:8d:fe:b7:
                    de:ca:6c:0d:35:d7:04:80:a3:12:c0:cd:91:49:d5:
                    4c:e8:98:a7:d8:44:3d:45:0c:47:7a:8b:fe:59:98:
                    b0:dd:42:32:a8:c0:9f:fa:34:d0:67:77:89:30:01:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:B1:C8:36:28:E9:D1:55:29:1F:55:E6:A4:09:25:35:3A:13:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c43559-dffc-3f07-a378-f78fb831b1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:b6:e8:d9:69:35:3f:d7:a4:94:75:d0:51:32:ac:8c:7f:
         7f:1e:68:db:a9:eb:d2:49:44:b6:5e:36:66:c8:ee:dd:67:6e:
         13:1a:5a:33:61:3b:e4:85:a8:c8:bf:62:7e:4d:da:90:d3:3c:
         be:88:5f:1f:18:95:97:52:56:04:e3:d0:69:f1:d2:43:6b:df:
         02:f9:77:42:18:22:86:bd:d0:52:44:6a:61:5e:dd:70:4d:ee:
         d0:d6:be:41:0a:a1:d5:09:5d:4b:b1:1e:61:11:85:70:38:bb:
         58:22:49:54:a4:29:b5:49:13:88:d8:c5:23:7e:4f:46:13:5b:
         dd:6a:30:75:e4:03:0b:ae:43:c3:c8:74:c1:9d:13:fc:15:15:
         2c:60:b0:98:9b:2a:39:13:88:8d:93:d2:57:29:20:59:d2:fd:
         c1:27:2e:2f:db:60:69:0d:a6:51:d9:f7:86:e7:9e:99:05:68:
         ff:ea:39:c1:75:9c:0a:a4:d9:d3:2b:1a:1d:a4:97:03:9b:e4:
         2b:1c:9b:ab:74:3e:2c:f7:d9:8a:ba:9f:19:ce:c9:b3:46:4e:
         3e:66:f9:e4:ad:73:3f:fd:f9:97:ce:0f:c6:9c:dd:06:ea:98:
         96:6a:33:31:56:b4:69:d1:c4:10:fa:58:60:f9:ba:61:74:65:
         ab:12:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:44 2026 by rpki-client