Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76bafc64-6bfd-32e4-810a-9e4385a5f84a.roa
File:                     76bafc64-6bfd-32e4-810a-9e4385a5f84a.roa (raw, json)
Hash identifier:          mG/N9BZ+IIaY0EgveXMgNyTzvRnjeJ0y8WUOeikpI2c=
Subject key identifier:   2C:7B:E0:38:C3:6F:86:96:B9:A8:39:2F:55:A0:A8:CA:58:6C:38:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA8720BBF73F53132492600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76bafc64-6bfd-32e4-810a-9e4385a5f84a.roa
Signing time:             Thu 02 Apr 2026 14:22:46 +0000
ROA not before:           Thu 02 Apr 2026 14:22:46 +0000
ROA not after:            Wed 01 Jul 2026 14:22:46 +0000
asID:                     396584
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:72:0b:bf:73:f5:31:32:49:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:46 2026 GMT
            Not After : Jul  1 14:22:46 2026 GMT
        Subject: CN=20e5196f-be83-4285-abef-781c25a0442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:91:20:9d:c4:d4:24:e9:15:39:48:88:f0:
                    0d:3c:2e:6e:a7:f9:6e:8c:a0:4a:a0:a7:1c:91:86:
                    f8:cd:49:12:aa:58:b8:b2:ce:88:34:0d:06:06:e6:
                    28:d4:ae:2c:ba:ac:6f:e3:51:94:a4:61:d4:a0:6a:
                    d3:c1:48:5b:34:6d:50:3a:6f:5c:fd:b5:60:74:1e:
                    05:90:50:aa:5e:42:17:77:93:3b:bf:3a:77:b0:2d:
                    af:57:6d:09:92:41:ed:ce:5b:3e:97:f8:ed:7e:99:
                    eb:ef:36:2a:e4:09:99:5b:96:ca:45:e6:51:6b:13:
                    35:d8:c0:52:83:1f:2b:bc:3e:94:da:6c:89:83:66:
                    ab:6d:44:f8:72:96:4e:5c:86:5e:a0:43:03:7b:d6:
                    e0:68:76:62:4c:47:b6:5d:06:3c:6e:78:61:07:54:
                    cd:34:e5:72:14:89:63:15:9a:30:d5:2e:62:e2:74:
                    d6:28:03:77:3d:74:45:7a:d0:26:1a:84:df:33:ad:
                    27:9c:77:5a:93:19:56:27:9f:8d:35:a8:9b:9e:98:
                    2e:24:26:6b:f3:81:af:8d:53:c8:47:5e:ea:09:fa:
                    9d:4b:e0:e7:10:29:f5:e4:e8:c7:83:76:9c:8d:a9:
                    69:ad:bb:b4:33:f0:69:9f:c9:d0:64:da:a8:78:0c:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:E0:38:C3:6F:86:96:B9:A8:39:2F:55:A0:A8:CA:58:6C:38:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76bafc64-6bfd-32e4-810a-9e4385a5f84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:45:37:12:8c:0e:99:09:9a:68:a7:63:27:01:89:86:4e:62:
         0a:c4:d3:89:ba:10:6a:8d:dd:b8:86:00:80:fe:fa:61:f0:78:
         2f:c7:57:f9:08:f7:af:29:96:b2:e2:e6:43:13:a8:ae:57:c0:
         3e:6a:e0:0a:48:04:99:5d:6b:2d:8e:df:da:88:cc:af:a4:99:
         8c:a5:db:02:da:99:4f:e7:e1:7e:78:fc:3f:d9:b8:4f:0d:a3:
         27:05:60:0b:bb:0a:40:a1:17:9e:6c:54:11:3d:9c:29:d3:b7:
         94:fc:2b:cd:79:2b:fc:5e:92:87:6f:99:04:8a:d7:8a:c0:92:
         ce:59:18:24:2d:45:1a:e5:1d:f3:87:6d:a1:44:b3:f6:56:9e:
         8a:ea:6b:50:97:08:33:77:16:26:d5:88:4a:4e:8e:b8:63:ca:
         24:64:a6:eb:40:dc:4b:ef:f8:6a:8f:8b:9b:d5:ca:ee:d5:a0:
         d4:40:d4:93:8e:fb:b9:35:e8:c5:ad:e5:22:33:73:b8:ed:0c:
         27:5c:b9:8b:78:07:8d:13:49:90:d9:91:a2:9b:54:3c:d0:ba:
         d7:ae:3e:7d:8a:aa:0e:17:09:64:73:54:f6:26:ed:be:38:f2:
         11:84:a4:cd:00:24:f3:23:55:27:41:a2:60:4d:17:a0:65:f9:
         7a:e2:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:04 2026 by rpki-client