Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f841fb5-9f56-3243-85e9-a6e04560e10a.roa
File:                     5f841fb5-9f56-3243-85e9-a6e04560e10a.roa (raw, json)
Hash identifier:          HEKymHhqoyguhMiuxXpbvCvh5tnmh+bq6Bt3QOBpmYY=
Subject key identifier:   3D:B3:D1:FB:0C:B3:CD:F4:D7:B2:DB:48:02:D9:95:45:73:D3:25:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1934BF70428572C67F780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f841fb5-9f56-3243-85e9-a6e04560e10a.roa
Signing time:             Tue 07 Apr 2026 14:30:14 +0000
ROA not before:           Tue 07 Apr 2026 14:30:14 +0000
ROA not after:            Mon 06 Jul 2026 14:30:14 +0000
asID:                     396610
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:93:4b:f7:04:28:57:2c:67:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:14 2026 GMT
            Not After : Jul  6 14:30:14 2026 GMT
        Subject: CN=71c2d685-9a71-4bf9-9887-e1d48a7de130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:ff:03:0b:5f:9c:41:ea:c9:5c:6b:a2:ed:
                    7b:c2:51:74:a3:04:dc:80:cb:bf:ea:84:e1:71:a0:
                    91:b0:1e:a2:2c:15:7c:5a:8f:03:68:14:64:ac:7b:
                    76:ba:cc:22:c2:28:9a:2e:47:2f:a7:ba:13:b2:e2:
                    17:31:75:8a:82:a6:52:d5:cd:58:ae:b2:29:8d:ec:
                    65:10:ac:85:8d:75:5b:e2:44:76:c0:f7:8d:ca:3a:
                    af:37:bb:58:87:18:dc:c6:f0:16:14:51:13:34:f9:
                    ed:37:24:b7:49:ac:13:06:d6:b7:52:54:77:34:f2:
                    73:2e:11:9f:76:d7:4e:d6:28:40:10:34:2d:48:b6:
                    b9:3a:83:ff:a4:e3:f9:80:b4:dd:7c:04:9d:5b:9f:
                    c5:8e:4a:f6:54:0f:89:b1:7d:87:89:70:67:9e:24:
                    ee:34:23:4f:ea:a9:fb:3c:cf:b4:c3:77:91:17:c5:
                    00:ad:2f:f2:c3:9b:56:df:89:7f:74:f3:68:ee:b8:
                    ff:dc:69:6c:15:7c:a5:f2:80:33:1b:63:96:d8:f7:
                    b2:f4:2a:bf:9b:e1:da:d2:65:bd:6f:37:16:85:9e:
                    95:b8:2c:e7:57:24:32:a4:d5:d3:cd:60:bf:68:bd:
                    ab:e9:18:b4:77:9e:04:89:e8:17:11:32:8f:87:a5:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:D1:FB:0C:B3:CD:F4:D7:B2:DB:48:02:D9:95:45:73:D3:25:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f841fb5-9f56-3243-85e9-a6e04560e10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:a9:a6:32:ad:01:6d:ba:53:cc:83:56:48:11:8b:c2:a7:
         02:1d:46:82:01:7e:52:97:39:a5:63:c0:16:fd:ee:ff:61:3b:
         c4:48:ab:0b:36:cf:36:d7:e3:a0:db:19:fe:01:1f:a9:cb:a1:
         0f:44:f9:5a:81:2a:b8:a2:e2:c9:fa:af:bb:c9:50:8b:21:97:
         b4:6a:0c:cb:7a:81:d9:ab:3b:05:9e:49:bd:4d:31:3c:01:af:
         67:51:12:37:96:e4:48:eb:03:64:a7:66:01:e1:f6:49:3d:2c:
         be:b8:8f:3e:52:11:23:8d:ae:03:bb:18:cf:b3:e5:43:b1:0f:
         de:19:df:e9:3c:39:3f:2b:f1:fa:7a:fb:c7:bc:11:d2:c2:cc:
         c2:3a:9e:32:69:c4:83:29:3b:36:d2:27:43:9e:4b:bb:16:69:
         f7:d0:ef:e5:c8:ae:b0:fd:fa:a4:0b:ac:b4:9e:a0:5e:d1:d5:
         27:38:66:a7:fb:77:07:f7:ca:40:b9:63:6e:0b:31:4e:da:f9:
         c6:ee:8d:a9:9d:77:2c:88:00:ea:73:05:64:97:4b:a2:40:b8:
         df:fe:97:e8:d3:2b:09:d2:60:a5:31:aa:22:12:ed:b3:23:b0:
         d2:64:41:bb:5f:2f:65:1b:38:f7:0c:35:9c:47:4b:ae:7f:06:
         ce:a9:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:29 2026 by rpki-client