Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd22e78a-4068-3448-896d-658f499fda29.roa
File:                     bd22e78a-4068-3448-896d-658f499fda29.roa (raw, json)
Hash identifier:          TvCVFTMo42cNul/bcVQJkbYke1YN29MPm3YUfuRx1Ok=
Subject key identifier:   CC:69:76:95:7F:DA:DC:CA:C2:54:4A:22:9B:20:B9:E8:18:A8:27:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA18F3D4C56F5345D4EA900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd22e78a-4068-3448-896d-658f499fda29.roa
Signing time:             Tue 07 Apr 2026 14:30:12 +0000
ROA not before:           Tue 07 Apr 2026 14:30:12 +0000
ROA not after:            Mon 06 Jul 2026 14:30:12 +0000
asID:                     396584
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:8f:3d:4c:56:f5:34:5d:4e:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:12 2026 GMT
            Not After : Jul  6 14:30:12 2026 GMT
        Subject: CN=e559b08a-38b9-4f5d-9ffd-5e40115ed58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:86:ea:e9:90:fd:ef:b4:56:01:20:1f:f3:
                    18:58:49:5c:85:3d:d2:68:67:bd:cb:cd:ee:b9:21:
                    9d:fb:c5:7e:7f:c2:52:d1:ad:c3:31:c1:92:1e:b1:
                    ae:7f:01:13:77:da:23:d3:49:f7:45:ac:09:d3:db:
                    fc:57:a0:ef:92:1d:5a:b9:27:3f:65:64:b6:4e:28:
                    09:54:7d:96:40:77:a3:07:6e:79:22:0e:d0:0b:0f:
                    ff:4c:61:83:80:8d:9c:08:da:f6:e4:84:72:32:08:
                    9e:93:55:4a:97:65:71:ce:5b:54:25:e8:5c:36:74:
                    cb:38:59:1c:e4:af:e4:81:7d:d8:f3:27:54:93:17:
                    b6:f9:73:48:6f:d8:ec:58:e9:67:ad:65:93:bb:eb:
                    52:2a:5d:85:f4:e4:0e:7c:82:6b:c8:24:ad:c4:c7:
                    d0:61:2b:f3:80:58:9d:b7:91:91:61:96:34:4e:7a:
                    d7:4d:72:09:95:5f:37:cc:91:ca:2b:2a:44:87:57:
                    85:a5:3b:e2:ce:ee:0c:1d:02:52:5c:da:05:97:1c:
                    e6:35:bc:ad:db:fc:c0:eb:9f:3a:01:03:7e:a8:9c:
                    60:56:b8:73:d2:3b:48:2b:51:11:73:ce:e9:b7:fc:
                    e2:25:f4:ca:7a:56:54:2d:12:b2:04:1e:75:db:4b:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:76:95:7F:DA:DC:CA:C2:54:4A:22:9B:20:B9:E8:18:A8:27:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd22e78a-4068-3448-896d-658f499fda29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:2f:73:9f:23:e3:a7:a5:14:66:3e:f1:28:1e:23:c8:11:
         68:9a:f0:4a:dd:1a:9e:f8:d4:34:cb:df:f6:98:b8:9b:2b:6f:
         ea:0b:67:51:0d:9e:42:9f:5c:d4:e3:e4:fe:7e:b6:cf:84:57:
         f7:48:5d:c5:7d:7c:1f:98:d0:bf:aa:73:41:ed:39:9f:7f:c8:
         55:a4:6c:67:1f:94:7a:da:69:15:0c:f0:a0:09:c5:2b:48:8e:
         3b:8c:dd:62:e1:69:c8:43:6a:54:f0:cf:63:cd:e2:a5:58:84:
         5a:31:2d:15:3a:78:f1:46:bd:af:36:37:84:49:60:51:e5:af:
         5b:c4:c4:ae:77:b7:74:54:22:55:d3:6c:46:9f:d8:ea:f5:d0:
         6f:2d:fd:6d:68:ac:dc:4b:42:8a:f7:c7:92:9f:14:1b:2e:b7:
         db:b9:67:17:84:47:51:8e:b8:ea:59:67:83:71:38:5c:98:5b:
         c2:c6:5e:70:a9:a0:ef:b7:5c:92:f3:37:e2:75:55:e6:f4:d0:
         10:59:d5:18:d8:9b:94:a0:24:72:02:ef:7b:3c:1a:66:96:61:
         29:ce:27:39:c7:47:36:60:15:e0:4f:90:37:92:75:19:d7:76:
         44:ac:43:b1:20:63:7b:74:3f:ae:28:a8:66:85:ce:16:30:8e:
         a1:04:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:25 2026 by rpki-client