Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad1045d7-a285-3750-baa8-3f0c8f3431c8.roa
File:                     ad1045d7-a285-3750-baa8-3f0c8f3431c8.roa (raw, json)
Hash identifier:          gFQ4PBuZm/YWpujiuIQwc2573bO52a7DMKZMzDO/eT0=
Subject key identifier:   C1:66:63:CE:73:EE:1C:C8:D6:24:85:E0:E5:13:6C:63:D1:D8:7E:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA885AC0CB0D9451998FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad1045d7-a285-3750-baa8-3f0c8f3431c8.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     396586
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:88:5a:c0:cb:0d:94:51:99:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=f35d1a15-f351-4585-ac82-c0717954507f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:2d:9d:9c:f4:fd:5e:8b:61:ae:19:8b:65:
                    7d:90:ad:b5:f1:8f:14:21:4c:28:c3:e2:b6:55:2d:
                    5f:f4:3b:a9:f9:ef:8d:1b:91:81:02:57:82:94:d8:
                    24:33:00:0e:fb:5d:e0:2b:d3:3e:f5:17:20:22:90:
                    77:c7:35:2c:93:94:68:12:fb:c9:e2:9a:33:4e:87:
                    06:a5:cf:02:9d:3c:a2:56:11:5e:16:b5:83:00:01:
                    b4:ee:1b:03:c3:e3:73:a4:f1:3e:f6:ae:51:b2:b9:
                    49:c1:a4:bd:e4:47:92:83:61:da:52:50:63:bb:28:
                    02:ac:9e:e2:36:c7:2b:a1:d5:e9:b9:af:2a:3d:80:
                    cc:06:43:db:72:8f:fd:36:3a:59:5d:86:92:c3:5a:
                    f4:c0:73:71:d7:0d:1b:39:a7:37:36:cb:f4:0c:8c:
                    17:5b:8d:4b:8c:a7:8b:5c:27:6a:aa:b9:fa:ec:a0:
                    3c:b5:57:5f:27:a4:2a:68:c0:db:07:6c:85:26:7a:
                    d5:1f:2e:75:50:60:a5:c7:05:6f:27:da:5c:0f:f0:
                    36:ee:a0:f9:61:c4:9a:f0:d1:33:f5:09:ef:5f:98:
                    1d:c9:1f:d5:66:db:a0:d7:ab:e3:d6:91:f5:9e:63:
                    56:d3:f1:32:86:47:35:86:a1:e9:e8:cb:4c:9b:be:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:63:CE:73:EE:1C:C8:D6:24:85:E0:E5:13:6C:63:D1:D8:7E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad1045d7-a285-3750-baa8-3f0c8f3431c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:36:a0:59:0a:76:84:4f:ff:3d:97:27:77:4c:09:b6:ff:
         7d:5f:f1:45:53:13:5f:dd:a3:e0:8e:59:9c:a3:75:e1:f0:9f:
         8e:e1:4f:8f:b4:32:04:e4:2d:c1:30:1b:d7:bf:f9:94:9f:dd:
         a2:b7:10:8d:e4:f8:ad:4e:34:31:d9:e9:2a:27:8e:bb:42:63:
         ed:22:27:c8:87:21:cf:19:cf:f0:3c:b3:be:46:f1:a5:a0:3e:
         69:d6:45:87:36:5f:19:0b:09:f0:f9:41:4d:b6:6a:c3:99:b1:
         3c:5f:b1:be:23:28:e4:3c:ec:de:63:7f:e6:5e:72:de:66:85:
         db:38:15:25:6f:07:58:57:75:b2:26:cb:46:2c:a0:7c:0e:5b:
         0c:3a:7c:83:d3:8e:3f:cf:da:16:71:bc:7b:79:c9:b9:bf:e3:
         0d:16:96:f4:b3:4a:af:3d:70:5c:9d:35:ef:46:aa:6c:57:3a:
         46:90:1b:af:39:a9:e6:af:79:ed:ce:8b:dd:49:b8:7a:da:d3:
         be:8a:01:90:a8:99:fc:3a:8f:de:84:d2:8b:01:5e:70:e9:58:
         e5:e1:68:df:72:bd:45:4f:01:9d:c8:4f:05:7e:cd:e1:59:c5:
         78:ed:ed:a0:41:8c:41:92:20:f1:03:df:79:48:93:97:1b:dc:
         1d:9c:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:20 2026 by rpki-client