Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba660ba4-43ba-3240-920d-87a9e3ee1f95.roa
File:                     ba660ba4-43ba-3240-920d-87a9e3ee1f95.roa (raw, json)
Hash identifier:          /GB4T5HECvMws5qy8akmKTidTUchBwMPjiET958DhUM=
Subject key identifier:   5C:0E:F8:C7:2E:CB:E1:9C:8B:AC:22:4D:B9:92:48:11:4C:29:57:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1A0E556AC285A5572D980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba660ba4-43ba-3240-920d-87a9e3ee1f95.roa
Signing time:             Tue 07 Apr 2026 14:30:21 +0000
ROA not before:           Tue 07 Apr 2026 14:30:21 +0000
ROA not after:            Mon 06 Jul 2026 14:30:21 +0000
asID:                     397202
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:a0:e5:56:ac:28:5a:55:72:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:21 2026 GMT
            Not After : Jul  6 14:30:21 2026 GMT
        Subject: CN=624c28b8-5115-41fe-8690-0044bde840c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:60:53:c5:81:0c:42:b9:69:6f:9c:38:96:
                    ef:da:88:4e:00:bf:93:38:49:44:d8:95:87:36:c5:
                    11:f9:35:5d:4a:1a:5c:0b:0c:53:35:05:c8:d3:7c:
                    28:a6:27:39:28:8a:29:13:bd:68:08:e9:22:67:23:
                    15:f4:29:0c:c3:bf:89:52:de:80:b0:3d:6a:d1:a5:
                    d6:12:f2:93:ae:b4:23:71:48:4e:ef:5e:bc:b4:76:
                    26:50:9b:2a:0b:4b:8e:8e:62:90:1b:25:3e:4b:a6:
                    b6:88:c7:0d:59:36:be:c5:e8:9a:c9:33:61:01:8d:
                    fc:cf:e0:88:b2:52:0e:c6:eb:1f:a1:ea:2e:f8:bf:
                    0f:6e:b3:e6:ce:8a:00:a8:99:75:b0:36:9d:a2:16:
                    43:1b:08:20:49:d2:56:1c:91:a4:57:89:7f:91:9d:
                    32:6e:40:8a:0f:c4:c2:d1:bb:39:bf:df:5c:30:cb:
                    65:99:16:ab:52:4b:ac:e4:bb:30:1a:18:5e:44:52:
                    c6:a0:61:f6:11:d6:17:bf:9e:98:5a:af:b8:d4:ba:
                    70:99:74:25:34:56:24:80:21:ee:12:eb:a1:19:76:
                    ee:08:34:50:23:dd:cb:c3:2d:1a:ec:67:e0:6a:e7:
                    76:4b:39:f1:e5:a4:7d:db:83:14:11:90:38:77:95:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:F8:C7:2E:CB:E1:9C:8B:AC:22:4D:B9:92:48:11:4C:29:57:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba660ba4-43ba-3240-920d-87a9e3ee1f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1a:a0:93:1e:20:ec:ce:21:f5:85:37:52:63:09:05:b5:fa:
         5b:41:59:34:06:40:ca:3e:a3:96:83:22:db:32:1a:81:97:10:
         b4:17:99:66:90:0c:5f:58:2b:ad:95:11:14:c3:fe:50:be:48:
         a4:a4:6e:3b:a4:ee:28:91:6c:21:1e:a0:04:a0:c3:bb:82:c0:
         b6:d2:28:27:37:a1:70:12:d3:5e:3d:78:18:5c:b9:59:d3:fc:
         75:8a:73:3d:ae:f6:d1:2d:f4:76:74:a0:be:6c:1f:93:21:c5:
         c4:d4:5c:1c:74:6e:56:65:cc:e9:a7:4c:2f:8f:82:c5:67:07:
         28:7f:ec:d6:65:7d:f3:0d:1c:b0:2f:c5:bb:28:7b:c9:6c:fa:
         8b:48:9e:1e:3a:3e:42:04:5e:b4:88:a6:93:7a:a3:ea:2d:ff:
         35:8c:69:36:50:34:a7:3f:e9:7f:41:ef:f5:2a:c0:c7:c4:40:
         09:84:f1:98:3b:3f:5e:26:74:32:c9:2b:a1:aa:5b:4a:f9:68:
         76:7b:34:76:92:75:5d:85:82:94:db:d6:b5:ad:2f:5e:de:3b:
         97:23:31:3a:51:55:57:d2:56:41:7b:15:fb:3a:7a:83:af:92:
         75:3a:ca:8b:50:9c:7f:17:50:84:d8:6d:f8:4e:4d:01:1b:68:
         7d:cf:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:30 2026 by rpki-client