Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be21f8cf-32d6-3357-a354-be6392ad7efd.roa
File:                     be21f8cf-32d6-3357-a354-be6392ad7efd.roa (raw, json)
Hash identifier:          qCw36DxF2jloz0X6rQdQGX0L4xvINh4OP9Aq/9ybd84=
Subject key identifier:   AE:4C:47:94:70:8C:B9:F7:97:BD:B1:C8:70:58:01:A5:FD:3C:4B:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA872F89E26EC0D793059C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be21f8cf-32d6-3357-a354-be6392ad7efd.roa
Signing time:             Thu 02 Apr 2026 14:22:46 +0000
ROA not before:           Thu 02 Apr 2026 14:22:46 +0000
ROA not after:            Wed 01 Jul 2026 14:22:46 +0000
asID:                     36626
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:72:f8:9e:26:ec:0d:79:30:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:46 2026 GMT
            Not After : Jul  1 14:22:46 2026 GMT
        Subject: CN=ae72cfb5-bccc-400d-ae7a-aa146df67350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:f8:b3:d2:78:d2:be:2b:94:68:68:5d:35:
                    c0:10:0a:d3:80:96:55:e4:7b:f9:dd:eb:11:2c:cc:
                    f1:39:a5:92:bb:6e:1c:33:25:f9:09:34:3b:f2:1a:
                    1b:9c:43:2c:d8:0b:c7:a4:9c:0c:bf:21:80:a1:b7:
                    3e:a0:b6:dc:f8:85:56:5a:d4:55:12:46:90:9f:12:
                    b8:e1:63:f8:d7:4f:68:57:57:15:ad:68:ec:f1:cb:
                    29:73:de:2a:ef:b8:9e:d6:ff:bb:bd:cd:b2:cc:03:
                    61:81:73:94:5e:39:8e:4a:1a:33:2b:84:af:28:ca:
                    68:90:6d:8f:61:cc:5c:fa:e3:56:9b:45:f7:30:c1:
                    62:da:9e:21:dd:53:66:d2:39:02:5a:83:5a:4c:95:
                    78:ef:fb:78:9e:22:e7:af:65:0f:ff:0f:0c:c6:7e:
                    ac:b1:b2:0d:09:32:74:9b:e4:cf:71:a0:77:c0:e0:
                    92:94:e5:5b:39:e6:07:24:fb:6e:d7:d9:48:b4:2d:
                    80:90:97:28:d8:79:59:81:3e:ce:65:33:5e:ec:ea:
                    14:2e:17:30:42:37:02:c3:d8:38:0b:9b:43:32:49:
                    25:c5:c1:51:96:f5:c4:c6:6e:00:1d:34:e9:b5:00:
                    96:03:dd:39:40:84:48:3d:21:1b:28:b5:86:64:00:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4C:47:94:70:8C:B9:F7:97:BD:B1:C8:70:58:01:A5:FD:3C:4B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be21f8cf-32d6-3357-a354-be6392ad7efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:69:fd:e6:94:92:8e:54:c2:0c:98:63:c1:ca:10:08:15:44:
         c4:8f:b6:58:87:a6:71:9b:02:de:35:29:8e:39:42:32:12:1c:
         12:76:bb:cf:bb:49:27:16:51:81:2d:f7:16:91:b6:57:c8:15:
         8f:c5:23:ff:6c:f3:32:06:d4:a8:ba:3f:51:6c:be:49:d5:31:
         2e:88:44:68:78:11:28:64:5c:4f:af:7c:60:95:6c:99:6b:1a:
         0c:05:c9:52:ce:00:cf:71:f9:cc:79:52:18:09:e1:28:28:9e:
         f7:85:ae:04:fb:14:99:43:c0:7a:b7:0f:95:9e:e1:d3:c4:39:
         68:06:9f:e3:dc:6c:05:8b:5d:0d:86:12:16:41:2b:d3:cf:b4:
         34:6f:86:78:27:6d:1f:e6:9b:3c:d3:ed:6d:d8:49:e1:6b:e1:
         8c:51:16:d6:bd:95:b5:3f:56:91:e9:02:9d:b1:59:7e:d6:47:
         3f:3e:ee:f7:21:47:06:4a:74:16:e2:08:1b:19:64:5f:fc:05:
         1c:cc:ee:69:1f:3f:a0:80:d8:0e:62:89:f4:de:36:15:19:e1:
         47:5a:7e:50:32:45:78:df:ab:90:9f:40:a6:40:ba:69:bf:62:
         fc:7e:bc:d3:66:37:be:a4:24:76:3f:0a:37:2a:03:37:0a:2a:
         c9:db:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:43 2026 by rpki-client