Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
File:                     9614d5aa-742e-3d66-a510-46747d6bc5d4.roa (raw, json)
Hash identifier:          +p8B34rRYiqI4+0yILd4zOkHtu0mXav4VUn7z1GNe1U=
Subject key identifier:   30:07:78:C2:95:EB:FF:BD:63:F0:1A:87:BF:06:7F:27:C7:91:A6:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A0547FCB406FA0299DA6B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     396561
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:47:fc:b4:06:fa:02:99:da:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=fd6fbe6d-2375-46e0-b4da-06beac62a615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:22:fc:ff:d9:ae:cf:0f:db:54:32:48:a4:
                    54:bf:7e:55:d1:09:87:5c:84:e2:ad:77:9c:b2:0e:
                    d7:cb:fb:91:dd:1f:d5:a7:10:85:a8:40:ad:af:22:
                    3c:06:03:69:9e:b6:a8:72:66:1a:7a:ec:33:80:b9:
                    a7:c7:2c:08:d5:47:fc:f9:2b:1f:1b:17:98:83:5f:
                    b3:67:20:a9:22:82:63:c6:8b:5a:f5:3a:2e:9f:c4:
                    52:63:05:41:b8:ad:af:b3:ae:54:ce:0e:ee:b2:c5:
                    b7:d5:59:a8:32:2a:eb:e1:73:f1:ca:06:08:ea:34:
                    18:72:76:77:12:45:31:56:58:2e:b9:e5:24:3f:d2:
                    72:b3:55:02:77:53:26:33:05:f1:bb:e7:88:6d:dc:
                    68:d1:ce:2c:5a:58:36:a2:f2:5f:6a:fa:ee:d3:4f:
                    84:de:54:79:6d:f3:59:75:41:bb:84:8d:8c:ec:5c:
                    08:1f:c7:1a:70:1c:c9:89:fa:91:36:9f:e6:08:3c:
                    5f:38:59:a6:55:b3:a9:ed:c1:ce:59:3f:8a:6c:c9:
                    69:8b:45:7b:5e:30:b6:b4:30:da:ef:75:e2:5d:c1:
                    d5:70:86:e6:f1:84:0c:40:23:25:b1:49:98:e9:90:
                    ae:4a:5d:4f:eb:33:dd:43:c2:35:3e:e0:bd:cb:ba:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:78:C2:95:EB:FF:BD:63:F0:1A:87:BF:06:7F:27:C7:91:A6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:00:61:54:60:47:0b:0a:09:fa:38:26:4c:01:4a:22:4b:15:
         88:a6:94:89:a1:59:6d:8b:68:58:43:dc:0f:14:96:3b:f7:bc:
         8c:de:f9:47:6c:2c:b1:5b:7f:8f:e9:ec:d0:af:a5:4a:74:fc:
         06:fe:ae:fa:5a:f9:fc:b6:cd:3a:4b:09:b7:82:6c:f8:69:66:
         27:e4:24:8f:17:5b:ad:a1:78:e3:3d:25:1e:1b:4a:92:83:0b:
         a9:ae:5a:a1:a0:05:f9:e9:ab:50:a9:3e:fd:36:ba:0e:7e:20:
         3d:c0:ce:29:48:47:93:1a:66:69:e4:4e:07:b2:36:be:16:ec:
         56:3f:89:25:7b:c9:95:f5:83:15:09:fa:e5:63:66:12:a0:fa:
         da:d1:54:a3:fb:3e:20:ee:c7:b1:0e:6c:eb:96:ec:5b:33:c3:
         80:67:26:87:f4:f3:62:ab:9b:4e:96:bc:eb:bf:75:5d:69:57:
         c3:6e:67:a7:af:f7:88:e9:30:b3:46:24:4a:c6:72:42:75:89:
         3f:a1:23:dc:9a:86:08:f5:39:f2:eb:2c:0c:9f:b4:1e:00:17:
         59:5f:87:91:04:6e:a1:80:4a:3d:77:20:0d:d9:3a:c2:8f:17:
         56:86:a8:21:c8:3e:89:ec:07:fe:ca:f3:3c:ef:25:e6:be:d3:
         e3:ea:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:46 2026 by rpki-client