Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c63d5f1c-fdf9-328a-ba77-01e61bd87d32.roa
File:                     c63d5f1c-fdf9-328a-ba77-01e61bd87d32.roa (raw, json)
Hash identifier:          hIbDkL4claT+35PHQg6XZ1OG3MuaFqotvIw83SqzwRA=
Subject key identifier:   BB:89:5D:C2:42:6D:2F:E1:F2:06:4D:39:E7:64:8F:D7:13:0E:34:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A05459F30986CF0D3B81900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c63d5f1c-fdf9-328a-ba77-01e61bd87d32.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     396611
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:45:9f:30:98:6c:f0:d3:b8:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=7aa0a6aa-eba3-4af8-ba40-1378793276b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:2c:a5:ea:d4:5d:7d:32:75:a1:3e:ff:de:
                    5a:85:61:b7:26:a8:65:bb:08:79:d6:08:d3:06:1c:
                    6b:0e:35:bf:eb:e7:19:a7:2f:b4:97:d5:6e:74:9b:
                    be:ba:47:36:dd:a1:ae:1b:54:10:88:6e:d8:f7:05:
                    d2:d0:bf:30:50:ff:91:b5:df:5f:24:cd:ca:bd:60:
                    7d:8c:0a:1f:b3:70:c7:91:56:43:d2:25:67:e4:87:
                    97:3b:f1:0d:2d:f9:da:7f:7d:83:02:eb:db:79:c1:
                    fe:b5:82:05:05:a5:de:b1:e0:19:3b:99:15:0e:b0:
                    cc:7b:28:36:ca:2a:be:15:05:81:af:9b:e1:6c:02:
                    92:96:d2:d1:47:e8:ca:81:a3:c5:cb:10:22:5f:3e:
                    0f:c9:51:21:70:47:6a:64:ac:66:37:e4:5c:66:e4:
                    5a:9a:d9:c0:f2:53:20:19:01:7a:ef:e3:aa:fb:4d:
                    5d:d6:6a:31:f8:a1:5a:ce:57:75:22:71:ab:0f:0c:
                    45:61:9e:54:25:f6:3e:0b:82:d7:25:91:d3:c1:01:
                    a6:17:f3:9c:bd:a7:97:fd:ad:be:e1:50:68:22:ad:
                    0e:21:31:82:2d:32:bd:fa:82:e7:00:8f:6e:8a:ac:
                    96:44:aa:9d:5d:07:75:d2:02:94:25:f8:80:b8:cb:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:5D:C2:42:6D:2F:E1:F2:06:4D:39:E7:64:8F:D7:13:0E:34:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c63d5f1c-fdf9-328a-ba77-01e61bd87d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:6c:79:ca:01:5a:da:5e:be:45:ae:9e:e4:98:b8:c2:39:
         a7:16:2f:ac:b5:93:44:d1:1e:1b:d3:03:ae:2a:4c:17:b4:30:
         33:9b:45:6f:b7:c8:94:9a:6f:2f:18:f6:48:ab:b9:a7:3f:a3:
         5a:da:c1:d8:d1:e8:eb:c1:2f:8e:6f:53:f2:75:c4:bc:e9:e0:
         64:f5:41:59:da:fc:5e:5f:ab:47:88:b3:e8:2d:b1:66:af:c6:
         6d:d1:17:bd:61:73:23:ed:0c:56:28:ba:60:22:46:fc:53:8d:
         b7:fd:e4:1a:b7:ce:8f:a3:d7:6d:66:f8:59:80:38:11:1e:87:
         ae:cd:85:6d:96:76:de:d3:c8:9a:a2:86:3e:7f:a1:29:c1:14:
         46:0c:16:a6:0b:68:3a:65:b5:ba:62:78:9a:9c:3d:88:9e:48:
         23:4b:39:21:ef:c9:0a:65:91:45:03:e0:05:35:ee:d0:b2:aa:
         15:ac:7f:fe:43:66:7b:01:f2:0f:93:0c:b7:44:2c:ac:08:51:
         f4:d4:82:a1:28:70:ad:a4:2e:43:52:d8:bc:0d:04:5d:5b:6e:
         71:64:21:ca:55:74:62:1a:12:b0:22:d9:2a:8f:17:c6:70:05:
         1b:6a:a4:8d:0b:7e:98:a0:ed:48:88:d6:5f:69:dd:53:b7:21:
         62:c4:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:30 2026 by rpki-client