Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4abd04d-992f-33f8-9f7d-74011c03b0ab.roa
File:                     b4abd04d-992f-33f8-9f7d-74011c03b0ab.roa (raw, json)
Hash identifier:          fhzHCh5jLuy5JS9G//pounkBUcjuC7B6GrQG7W3ThZE=
Subject key identifier:   15:82:FE:1B:0A:16:E5:F0:5F:14:42:60:0C:07:51:74:E0:85:43:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5E1A7B198870CAAD5B3A9540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4abd04d-992f-33f8-9f7d-74011c03b0ab.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     397202
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7b:19:88:70:ca:ad:5b:3a:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8f47a6a4-c570-460e-8d47-ee783f5ff111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:ca:96:2b:ea:48:e2:77:fa:a0:88:09:a7:
                    90:50:5b:08:42:19:1d:73:7b:a8:7d:4f:01:5e:ee:
                    1b:03:2b:82:61:da:60:dc:c8:44:f0:68:45:67:69:
                    71:eb:8f:af:da:9f:da:8b:12:e8:66:d9:26:fb:24:
                    5e:16:3c:44:ab:7a:ef:0f:31:59:58:e2:6e:7d:34:
                    6d:e8:1c:51:e2:79:cb:35:3a:3f:12:f1:8e:28:d7:
                    14:0a:30:c0:b9:7d:19:60:06:ff:01:41:52:df:89:
                    4a:d1:f4:82:66:5d:bc:45:9c:4f:30:0f:dd:6c:cf:
                    f9:99:e9:da:22:01:50:bb:19:fa:2e:28:f3:76:59:
                    c5:b2:cc:7c:02:18:9f:5d:5d:54:57:a9:85:ac:3c:
                    0c:ff:c8:48:ef:37:50:be:11:86:5f:28:cc:c8:f8:
                    ac:4a:c5:f5:c7:49:42:4c:c1:48:dd:c5:54:ed:bb:
                    51:8e:f1:2f:3f:22:c0:48:8e:b4:7a:5e:37:75:2a:
                    fd:21:57:03:fe:70:ac:14:af:d1:9b:d9:cf:3f:b4:
                    c8:10:a3:8e:38:77:75:5e:a8:f9:d0:f3:c5:47:e3:
                    6c:69:d5:7e:7f:00:4e:4c:29:a2:58:93:91:0b:e2:
                    32:41:94:c3:93:13:5c:30:68:04:f2:4d:23:9a:88:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:FE:1B:0A:16:E5:F0:5F:14:42:60:0C:07:51:74:E0:85:43:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4abd04d-992f-33f8-9f7d-74011c03b0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:90:b2:f9:d3:b7:b1:7e:86:87:ad:87:10:ac:f4:e7:19:60:
         c4:8e:c2:d8:b6:f0:f0:ec:0c:e2:6a:88:b8:cb:44:95:37:79:
         14:7a:8b:5f:0b:9a:65:4c:f3:53:c3:43:cd:ad:71:73:45:46:
         30:d7:91:24:ac:1e:11:2a:b8:24:0a:17:b2:9d:ff:e0:57:d2:
         fc:8c:06:2f:c5:ee:14:32:99:e5:d6:50:dd:d2:53:0d:55:de:
         0f:cb:08:1a:d7:55:fa:cd:66:39:f5:4e:fd:81:c5:45:b7:ea:
         11:9e:64:c0:19:e0:bc:50:7e:f1:29:1b:ad:92:a2:71:01:5e:
         b5:a0:7a:2b:e8:dd:b1:1b:26:34:7d:b6:17:1a:08:1a:98:e0:
         c7:a1:80:ce:dd:7a:d2:fd:c1:0f:8b:de:68:3e:da:2c:a7:68:
         f8:b5:2b:71:91:c4:35:16:59:4d:28:d3:c4:5e:a0:9f:dc:2f:
         c8:2e:01:de:57:4d:ed:36:ea:9b:58:ac:71:7c:4d:6d:e2:df:
         10:8e:dc:a2:1a:b0:4d:f6:3d:1e:3e:ba:01:72:17:ce:0b:7e:
         10:f2:4b:df:3a:35:40:84:07:04:f2:50:46:a3:94:21:a4:f3:
         cc:eb:30:1c:02:b0:87:31:bf:e5:55:5b:b4:d4:37:81:42:45:
         ad:f5:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:48:04 2026 by rpki-client