Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6065f514-1acb-34b8-834d-143d89a2978d.roa
File:                     6065f514-1acb-34b8-834d-143d89a2978d.roa (raw, json)
Hash identifier:          9p0QlL6O2QN57l9AfrUIjs3Gs5modzJVQZ2yD7/Z0ao=
Subject key identifier:   71:B4:45:BF:DB:E1:30:FA:7E:AE:C7:DF:63:56:BE:1B:49:5B:65:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7E174D1EEE83A7108400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6065f514-1acb-34b8-834d-143d89a2978d.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     20172
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:7e:17:4d:1e:ee:83:a7:10:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=dd4c6bce-f7a9-419e-ae0e-342de05df86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:3d:b9:12:ec:29:85:3c:2c:7e:9c:47:80:
                    46:ad:94:6a:ed:7c:0f:16:c1:2c:da:5b:5a:02:1c:
                    cd:71:33:fa:e9:ef:4b:e1:05:94:8a:b7:cd:3d:90:
                    5a:f1:20:25:06:bf:f4:a5:62:86:dd:3e:e9:04:fb:
                    c2:10:7f:8a:dc:4b:9b:26:ce:b0:49:ed:74:fe:9d:
                    a6:d6:03:a6:57:3c:e4:bb:23:5a:42:b4:08:38:0a:
                    fd:8e:ff:aa:68:6d:86:3a:7a:56:1b:11:a8:ce:49:
                    bc:ae:ec:b5:25:87:82:10:15:c9:1e:6c:ec:3a:82:
                    9e:10:30:f3:58:9f:13:a9:68:3d:d5:8f:3a:61:ee:
                    d0:cc:f5:fb:98:27:94:ce:9f:c2:a5:c7:f1:2f:f9:
                    c7:bd:38:ef:7f:7c:d0:cf:5e:2b:80:68:ac:60:aa:
                    2c:7a:3d:30:51:d7:e7:08:a9:bb:85:b3:05:55:30:
                    cb:ba:98:15:27:55:19:b9:40:6c:35:26:4e:08:4e:
                    7b:98:67:8f:69:ce:0f:4f:32:99:78:c2:5d:6e:e1:
                    c3:11:1f:f8:5e:36:39:33:da:cc:2c:b2:80:00:75:
                    7c:17:0e:c5:41:dc:97:8d:d5:2b:d3:df:9e:51:f8:
                    f8:d7:52:ed:e1:3c:e7:43:ff:8a:40:04:4c:26:f9:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:45:BF:DB:E1:30:FA:7E:AE:C7:DF:63:56:BE:1B:49:5B:65:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6065f514-1acb-34b8-834d-143d89a2978d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:21:34:67:ab:0a:c6:18:82:b3:05:b9:f4:a6:01:35:9c:
         c7:2d:52:88:2d:b8:a0:e2:7c:96:77:32:56:06:24:52:cf:65:
         f1:4e:d4:5a:60:1e:f9:bd:0c:d7:cf:05:6f:4c:29:3f:a7:0e:
         0c:d7:4a:68:c1:22:66:2f:7a:bd:0a:e4:cc:07:89:e2:d3:71:
         d9:56:be:83:d5:ac:69:11:51:bf:9c:dc:92:e4:e9:83:1a:b5:
         b4:53:9b:2d:2b:cc:8d:6e:30:b8:18:b5:4a:30:7c:8b:96:92:
         b7:3d:24:cb:0e:e5:71:fb:28:33:f9:f3:97:94:b2:d5:e9:9b:
         90:47:7e:af:89:25:c6:10:f2:c3:58:a9:e8:d8:8d:14:8f:12:
         14:2a:51:29:2e:24:52:c0:64:9c:d7:ff:4c:de:06:bb:d3:a0:
         0a:74:85:2b:90:cf:d5:4d:11:39:72:9d:ec:f6:49:6c:b8:5f:
         b8:b6:35:f9:31:68:3d:d3:30:39:2d:88:29:30:19:57:c7:22:
         c5:aa:8b:54:9a:3b:30:97:a6:f3:00:34:9d:4e:fe:12:a0:13:
         d0:0d:c0:71:ef:eb:33:05:7c:70:e5:05:c6:b5:aa:91:d6:be:
         4b:f4:0f:2a:07:90:31:74:ba:5b:07:2e:2b:5f:ab:34:e6:34:
         5a:d9:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:25 2026 by rpki-client