Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/647cb688-04b3-3ed6-849c-25fc993775cd.roa
File:                     647cb688-04b3-3ed6-849c-25fc993775cd.roa (raw, json)
Hash identifier:          mn9ZE9t6zwhdmYs3BXtP8u2XEUyHVpi+m1O8qm6ck+M=
Subject key identifier:   59:46:72:AF:02:4C:A8:F1:98:15:D0:9A:F4:16:E5:58:1D:DC:05:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5E1A5F0061CB7D572D0656A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/647cb688-04b3-3ed6-849c-25fc993775cd.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     396586
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5f:00:61:cb:7d:57:2d:06:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=b34c6ce4-88a1-4752-a3fd-b9bbe17844f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:5f:34:22:fb:80:f1:13:9f:d6:03:0e:ea:
                    1e:13:e8:ec:11:10:7c:09:b2:26:a3:4b:ae:89:c0:
                    9e:6a:dc:06:67:b9:1d:9f:09:bf:74:f8:a1:5d:c9:
                    2b:11:21:e3:f2:02:1c:86:09:f8:c8:cc:48:01:87:
                    8e:41:d7:78:d6:14:f3:0c:7c:22:2b:72:33:98:e9:
                    7b:9b:40:ff:c3:09:c8:30:87:22:5b:59:96:9c:0e:
                    08:48:0b:cc:15:29:ad:40:a3:b1:64:8e:8a:0c:3f:
                    df:e8:19:ea:8e:37:f3:05:cf:49:06:97:61:54:1d:
                    c3:12:58:57:c3:4e:16:a8:4f:17:3b:1c:e1:50:56:
                    c6:46:63:ce:fb:ce:63:9a:1f:9f:61:1a:3b:1f:c8:
                    9a:73:a1:a3:53:a2:19:6e:e7:90:81:a4:17:5a:e7:
                    9d:9c:b7:a2:d1:20:0e:b7:93:c4:7c:2e:8c:72:6b:
                    4c:4b:ad:7e:df:b2:79:30:22:c4:52:0f:9d:a4:f5:
                    c4:0f:25:4f:23:10:fd:b6:4f:ca:53:4e:aa:c7:15:
                    9a:ee:2a:d0:51:77:4b:69:b9:18:5a:7e:c3:d6:ad:
                    67:b8:00:77:4b:f9:6f:29:12:d4:af:67:79:cd:55:
                    bf:f6:ba:a2:42:08:5d:b6:c7:af:82:cd:82:95:e3:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:72:AF:02:4C:A8:F1:98:15:D0:9A:F4:16:E5:58:1D:DC:05:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/647cb688-04b3-3ed6-849c-25fc993775cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:9e:af:85:fc:c2:f8:f8:4d:9c:18:c6:9c:69:0e:68:36:
         a0:db:61:96:6e:a2:11:8d:05:2a:24:9d:e0:4e:0c:55:cf:e7:
         5e:70:8f:0e:05:38:d0:01:9b:f6:57:22:fe:bf:8b:b5:3b:63:
         6d:69:fc:9e:cb:3f:bd:e4:0a:0d:0a:3f:7c:a3:99:2e:85:cf:
         fa:09:51:c0:f2:82:3c:a6:38:0a:e4:98:87:c5:a3:7d:fa:89:
         fc:44:ff:1e:81:23:e3:9a:74:fb:77:9f:92:53:fa:91:30:46:
         30:0b:a6:95:93:b4:07:1d:c3:d6:a9:08:80:b5:dd:8a:85:c0:
         27:98:43:f2:0c:a4:f0:b9:42:d3:96:a9:93:d5:00:3e:0d:ea:
         72:95:16:fe:5e:d6:dd:9a:9c:8a:a7:22:7f:61:5e:48:f1:1f:
         db:a5:f7:74:25:5d:c2:bd:2d:60:a8:71:be:b1:1f:dc:8c:e3:
         b6:e4:35:27:33:b4:c6:2a:09:43:91:49:64:b6:2b:ee:12:f3:
         9d:e6:76:bd:b8:f0:69:cf:6f:d5:a0:06:d7:32:c8:94:05:29:
         ce:00:3e:ab:aa:8b:26:a7:e8:74:81:75:84:e7:27:d2:cb:0d:
         53:00:d1:a6:a0:c3:57:d7:3c:db:8f:d6:c2:30:a9:04:54:6f:
         dc:c7:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:35 2026 by rpki-client