Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa
File:                     c1a5e702-cfee-3606-8441-1552be143be7.roa (raw, json)
Hash identifier:          njfR8dcvFiLCKbVREFBMwDDQmw5uP1xTGBrZj1IuZwk=
Subject key identifier:   FC:06:55:FB:D4:85:F5:B8:F5:5C:B1:6B:41:17:AD:1A:43:F0:29:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5E1A487F7B2E784B7D7B3040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     397195
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:48:7f:7b:2e:78:4b:7d:7b:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=2d27f38c-f80d-4fb6-93f4-b3f09d038c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:89:2b:c9:bb:44:4a:1a:53:c8:fd:cf:06:f2:
                    69:34:3c:9d:22:79:09:63:d5:fa:f9:be:8f:02:43:
                    b4:6c:55:4f:88:04:a9:51:ab:4a:be:11:ec:ee:a3:
                    cb:51:7c:c4:98:08:04:9b:52:1b:4f:6f:52:23:e4:
                    75:9d:d8:ce:cc:d2:b4:a9:32:b4:97:b5:f0:c6:2d:
                    c9:a9:5f:00:b4:de:12:a4:c4:36:2b:74:b8:69:a2:
                    fc:43:30:a1:87:1f:be:5b:87:6e:08:67:dc:df:a5:
                    fc:86:24:ef:ea:b5:d6:ac:0c:a7:1b:93:0e:03:90:
                    7d:b7:e1:d3:b4:95:6b:f5:e5:da:08:94:72:56:4a:
                    39:b8:6a:18:3d:19:0a:60:70:84:fe:09:a1:fa:0d:
                    8d:97:be:73:88:2a:57:0c:ba:2f:aa:36:15:60:9c:
                    c5:b2:a5:e7:da:86:91:ea:25:87:cb:6c:4d:3d:55:
                    d2:64:ed:be:fe:00:c6:7b:f9:07:13:e1:d6:90:1a:
                    f3:dd:2c:64:6b:b3:90:53:d3:24:84:82:34:40:80:
                    1d:fc:99:89:6a:dd:1f:fb:71:32:3f:b7:1e:8e:4b:
                    99:e0:52:92:19:86:b4:2a:7c:4b:b7:1a:3e:9b:55:
                    89:93:9c:1e:79:71:ed:b7:ae:36:79:e2:b2:53:50:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:06:55:FB:D4:85:F5:B8:F5:5C:B1:6B:41:17:AD:1A:43:F0:29:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:93:55:db:75:61:42:91:d9:10:b3:81:10:5e:88:61:a7:35:
         aa:e2:11:18:52:6d:3d:da:f6:03:8b:b5:f5:76:31:ea:48:83:
         56:6e:a5:94:2f:89:f3:c3:f5:87:3d:72:9d:c3:64:3a:66:9a:
         8f:f2:d4:a7:c4:c9:f1:9b:3a:e2:95:35:55:23:e9:76:b3:7e:
         c1:d8:48:d6:32:b8:04:ca:54:62:93:04:37:c4:db:a8:b8:16:
         00:78:e4:ec:16:29:8a:cd:9b:f3:d8:33:76:98:fd:80:1f:de:
         c0:dd:ca:1a:a1:6b:9b:9a:68:c8:cc:40:7a:b2:fa:9d:d7:65:
         53:0c:4d:0e:c1:10:8d:2f:7b:4c:d9:c1:14:1a:e8:c0:f5:b1:
         4c:14:d3:d9:38:2e:b1:f7:52:12:37:4b:a3:f8:59:5b:27:fd:
         72:03:29:4d:9a:e4:e2:88:d6:b8:95:a1:e9:0b:b4:66:2f:d4:
         08:c0:7b:c3:61:4e:bc:d0:06:d5:b3:d4:a3:b9:8b:5e:d4:f3:
         a9:db:50:9d:cd:6e:86:ce:fd:8e:03:aa:fc:ed:9a:0b:52:3d:
         9c:10:14:1b:4c:ed:45:f1:7b:4f:ba:f9:6b:6e:b0:59:b8:22:
         08:4b:64:68:09:f0:c1:9f:18:97:23:2a:0a:bc:32:7c:1f:ca:
         d2:67:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:28 2026 by rpki-client