Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa
File:                     99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa (raw, json)
Hash identifier:          KAJbDc1G/lDbx5PHatEi/GRffYB0dLkuiwZ61BAn4Ew=
Subject key identifier:   34:73:BE:9D:B7:37:54:30:52:60:40:73:D6:D4:4A:6A:39:6C:C3:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADB2986523DC2B5FC11C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396594
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:db:29:86:52:3d:c2:b5:fc:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9c7572e7-3b7b-4967-a6cf-2720129eaf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:03:76:85:f8:64:4b:0f:30:11:ec:11:25:
                    b1:f0:f9:98:e1:f3:3b:64:e1:a2:3a:32:43:60:00:
                    13:ee:35:02:a2:44:10:79:ca:39:71:d5:c0:51:65:
                    47:9f:6e:dd:60:d1:e0:0b:19:d7:2d:17:c3:72:13:
                    46:9c:27:eb:44:c4:be:f9:61:ce:a4:22:41:26:7f:
                    56:fe:75:bd:8a:b1:d5:90:d1:21:86:77:e2:3f:40:
                    ea:52:41:5f:31:61:9f:9d:48:c7:93:43:9c:00:a2:
                    52:4b:7c:5b:75:de:10:5b:ba:d5:33:c0:b9:a1:cc:
                    c5:1d:73:0b:22:27:82:aa:01:68:31:a3:b9:25:50:
                    17:71:89:4b:8b:9f:69:63:7b:2b:84:ad:b2:1e:eb:
                    9c:62:d7:43:3b:45:6f:c7:84:63:a3:4c:42:5f:00:
                    1b:85:6a:9e:23:fe:93:64:3a:17:09:a3:17:19:a6:
                    63:c0:1a:ed:12:1c:09:02:f7:60:5f:e5:53:21:d7:
                    29:d9:be:7a:b5:f5:a9:93:8f:20:f6:6d:c5:9d:08:
                    81:b5:58:34:13:1f:14:6c:aa:13:cc:34:12:0b:31:
                    88:56:15:59:b4:92:4d:bb:d9:e0:64:42:cf:d0:46:
                    f7:f4:5d:32:d7:ae:3f:d0:8a:af:e0:db:dd:d6:59:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:73:BE:9D:B7:37:54:30:52:60:40:73:D6:D4:4A:6A:39:6C:C3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d0b5cd-94b1-3168-a4e4-fecedac77e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:d8:e6:87:02:14:4c:60:d0:c8:14:c8:22:35:46:06:6f:
         85:a6:7a:34:24:13:fc:b5:7a:53:e0:94:91:76:a1:30:f1:69:
         d5:35:c5:17:ea:3f:55:97:cb:3a:2a:b7:c8:7d:fb:6e:11:2d:
         dc:95:93:35:45:46:89:c0:3d:45:1d:9f:83:e9:a9:6f:c1:69:
         38:a3:28:96:f6:c6:80:01:b8:a6:f9:19:f2:99:64:5b:95:e1:
         3b:66:73:f5:81:16:0c:34:6e:cd:4f:fe:61:31:51:99:54:2f:
         53:1d:19:47:4b:e8:e6:e7:31:07:90:20:96:61:23:3a:e9:96:
         54:49:34:ba:44:60:4a:58:b3:a2:44:c8:58:3a:83:3a:38:66:
         89:34:9d:28:2e:78:b9:d4:30:7f:2c:8a:53:97:25:42:f5:63:
         52:92:86:b8:02:9e:ff:8e:86:42:5d:60:7e:53:4e:7c:c8:a3:
         d3:47:51:61:1c:20:5f:70:4f:4c:70:dc:b2:1c:ff:e3:cc:63:
         c6:26:8c:ea:04:84:ab:eb:5d:e2:55:92:0d:68:10:5f:ff:6f:
         e6:82:14:c5:1c:15:2a:dc:4d:1b:cf:18:47:fa:d4:21:e5:4c:
         84:22:87:37:f2:38:00:6a:1b:b0:49:cf:1d:1d:cd:35:37:6f:
         c4:1a:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:33 2026 by rpki-client