Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa
File:                     7d6727f7-4837-3595-98aa-9165cd8e8b85.roa (raw, json)
Hash identifier:          1SolOc5FrHyWS4t/jB3mP671bU9IIg6NKlYUcacVbVs=
Subject key identifier:   60:8F:32:58:9B:0E:34:53:03:B6:45:B3:AA:DB:38:BA:A0:9B:16:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D59EA4D196CE91B064883D300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     396616
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4d:19:6c:e9:1b:06:48:83:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b03442d6-7419-4019-a161-8b809cc72667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:51:eb:6a:c2:bf:68:6c:4c:85:a9:b5:73:
                    ea:70:cc:88:66:70:5f:3f:b8:2c:b1:0a:b8:c5:80:
                    49:ca:7b:f4:df:99:f9:a2:66:92:d8:32:2e:3a:be:
                    2a:89:08:ba:f4:45:85:c2:ad:83:4e:58:6e:f7:26:
                    da:4a:1c:f8:22:25:6c:d5:f6:22:ac:24:6e:fd:8a:
                    ae:8d:c6:2b:79:85:40:39:93:0d:69:e5:23:f9:a2:
                    6a:78:d5:0c:be:d3:5e:e7:1a:0c:e1:62:74:3d:26:
                    56:c5:68:8d:19:93:d9:c2:a6:c1:94:79:69:fe:0e:
                    ea:d4:eb:0e:26:20:b8:87:03:22:97:e9:4b:70:58:
                    2f:10:db:06:40:d3:8a:cd:8e:6c:59:ba:5f:01:95:
                    80:f6:48:90:7e:70:c7:c5:6d:40:0c:00:07:a0:99:
                    a5:1e:b0:b7:9e:bd:e9:51:14:77:52:10:9b:57:86:
                    96:72:8a:58:1b:66:59:07:a7:9e:ee:be:03:a1:d4:
                    4a:f5:46:4f:8a:65:de:c6:8a:64:dc:c4:84:6c:a6:
                    0a:a9:ed:5d:8c:98:ad:14:4f:d3:39:46:02:b3:ed:
                    9e:8b:c7:35:90:3e:a9:d4:cf:a6:1f:58:d8:24:b3:
                    98:4c:62:0b:e2:5b:5e:a1:01:ac:09:7a:b4:56:55:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:32:58:9B:0E:34:53:03:B6:45:B3:AA:DB:38:BA:A0:9B:16:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:65:04:17:1b:76:4a:1c:ef:4c:03:bb:5d:f2:9a:fb:3c:d8:
         aa:67:9d:2e:66:d5:9c:b7:be:7b:5b:c1:2e:f9:b9:b1:9f:38:
         bf:65:f8:c1:eb:ec:52:78:3e:91:e6:28:ac:3d:25:6a:b8:4c:
         74:62:5d:81:eb:7c:68:03:b9:7b:c6:41:89:e8:a0:e9:68:3c:
         ae:19:2a:52:d9:75:64:92:be:ea:0d:83:cc:3c:53:f5:e7:01:
         1c:6c:7d:26:28:83:56:51:eb:07:9d:f6:9f:13:93:ce:76:fe:
         e1:a1:5c:cf:28:6c:ff:ea:49:a5:3a:5d:54:db:48:c2:0f:56:
         44:66:c8:9e:2e:74:74:df:38:d5:fd:ef:a0:4a:40:fb:e2:2c:
         2d:13:ad:b1:33:4f:64:58:cc:3e:bc:40:4f:19:53:bb:db:05:
         12:d5:9b:8f:77:d8:14:58:3a:54:80:e7:5f:c8:e4:1a:d8:de:
         94:4f:ec:7e:e0:9f:f0:72:6b:ee:50:66:b4:97:da:da:2b:5e:
         78:31:1f:23:8b:3d:ef:28:5c:01:c7:7c:fa:cf:20:69:1f:21:
         0b:84:4f:8a:6e:79:d4:03:2a:c1:26:9b:a6:34:15:55:fa:bf:
         dc:3e:29:1e:27:1a:60:26:8e:96:2f:4f:d9:06:b1:dd:f3:f3:
         18:59:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:33 2026 by rpki-client