Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b53d7f2-5941-3432-abe3-2ca254e04dbe.roa
File:                     5b53d7f2-5941-3432-abe3-2ca254e04dbe.roa (raw, json)
Hash identifier:          M5uBpN6UQWKZumM3CV0R7QsE4Xh4TvDvk+sNOJ7KaZw=
Subject key identifier:   6C:33:6D:22:55:A9:10:2E:52:BF:D3:EB:8A:CD:83:6C:5F:22:80:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA183759CC98D54C227DB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b53d7f2-5941-3432-abe3-2ca254e04dbe.roa
Signing time:             Tue 07 Apr 2026 14:30:07 +0000
ROA not before:           Tue 07 Apr 2026 14:30:07 +0000
ROA not after:            Mon 06 Jul 2026 14:30:07 +0000
asID:                     397200
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:83:75:9c:c9:8d:54:c2:27:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:07 2026 GMT
            Not After : Jul  6 14:30:07 2026 GMT
        Subject: CN=7301afb1-4d0d-4160-8b0b-a7ebd923bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:ab:f5:a9:0b:85:7f:ab:ec:e7:07:aa:68:
                    74:23:74:1a:d2:b6:ea:a2:2f:2f:bb:9f:75:7e:53:
                    b4:39:1e:cc:b1:2b:5d:1d:35:0b:cd:ab:02:da:9a:
                    fb:85:3a:81:b9:09:e9:89:f1:f8:0a:f2:56:0e:11:
                    43:1e:52:05:05:36:e0:dd:6e:46:49:80:86:60:b1:
                    03:23:af:22:0f:54:97:13:4e:e4:72:68:2b:a0:df:
                    1b:66:cb:b3:91:4a:cf:d8:cd:9c:f9:79:9a:11:60:
                    f2:69:da:83:e4:ab:1a:1b:71:f0:ea:9e:54:eb:b3:
                    dd:b2:ba:96:83:6d:1c:f8:6d:32:eb:01:fb:49:81:
                    6c:7b:45:ae:4a:c9:07:d3:7e:5c:4f:3d:98:32:b6:
                    33:e9:7b:82:8b:59:7d:17:8b:e7:ca:21:0f:15:62:
                    2d:f7:4e:39:f6:69:c6:ad:11:90:e5:51:54:73:cc:
                    8a:80:92:37:d3:b9:28:01:b4:e1:d6:21:0c:f4:14:
                    08:e4:33:c2:e3:d0:e3:e5:b5:f9:20:7a:d2:a1:cf:
                    d6:4a:13:ea:cd:9a:e2:cc:39:7c:94:ad:f6:34:35:
                    7b:dc:8f:c0:12:49:d7:4f:1e:9d:4d:83:70:7d:29:
                    cf:11:6d:a3:b6:87:4d:ad:81:4b:0a:65:73:2d:a3:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:6D:22:55:A9:10:2E:52:BF:D3:EB:8A:CD:83:6C:5F:22:80:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b53d7f2-5941-3432-abe3-2ca254e04dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:b5:c3:28:cd:bc:6b:80:16:34:06:f3:36:40:42:1c:05:
         6e:e1:92:f2:95:26:45:63:01:03:71:5c:e9:b4:0f:01:c5:67:
         76:b2:30:26:d8:db:6d:61:55:09:fc:7a:42:8f:c5:2b:07:20:
         7f:81:ff:94:e3:77:b5:ce:90:04:cf:21:85:ca:2b:1d:5f:bb:
         fd:e1:8d:c0:10:2a:72:95:73:f3:1b:77:06:00:f4:68:d8:b3:
         84:e0:27:db:5c:36:f5:25:23:b7:86:f4:88:f5:2d:3d:61:b2:
         29:3c:e0:42:93:8d:db:e4:14:a9:20:10:77:98:f5:4e:93:b1:
         75:4e:14:66:d9:36:af:d0:a9:a5:6f:52:5d:4a:21:32:14:14:
         29:c6:b1:eb:31:de:87:2f:22:8c:81:0d:b6:ff:b3:d8:ab:23:
         f8:ee:e6:71:6f:55:ae:16:72:2c:5b:3f:09:e9:f5:fa:f3:58:
         bd:dc:9c:b6:ba:e2:aa:62:9e:07:50:d7:98:7e:4b:f2:6e:1a:
         2d:73:c5:03:db:3e:6b:d6:7d:d0:99:04:cf:7d:32:e3:ff:4b:
         4c:02:5e:b4:aa:20:a6:18:a7:37:f4:66:3f:1e:ce:4e:39:22:
         d9:01:f3:eb:10:cc:2c:8b:92:14:64:96:30:a3:3b:18:84:48:
         68:c0:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:06 2026 by rpki-client