Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa
File:                     ce572bf2-53f6-3595-aa83-e027b4da7555.roa (raw, json)
Hash identifier:          oUNzpMexSCyNM//wVyVWSbpDZJHaeI4AlaPAp0+Y5Ag=
Subject key identifier:   53:00:35:A4:FC:06:7B:8F:7C:0B:D0:64:D5:2E:14:28:B2:AB:CA:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA8E3E5436B66FABBAE480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     397198
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:8e:3e:54:36:b6:6f:ab:ba:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=b70e1493-c4f0-4c9c-ad73-60c110646b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:39:da:09:57:62:c8:57:d0:8a:e7:1a:ab:
                    c6:9e:cf:e2:7c:f5:4c:6d:a9:3a:73:1b:19:d2:ce:
                    87:da:33:58:07:d0:d4:27:0c:5a:9c:07:2f:b1:34:
                    a2:0e:9f:71:5c:c9:80:66:94:4f:b7:94:ac:e0:40:
                    8c:3c:df:3f:fb:05:df:39:44:5b:b1:50:d7:db:d9:
                    28:dd:9e:3a:40:3b:cd:a4:77:dc:4a:ed:02:03:f2:
                    34:b0:6c:08:e5:9e:5e:97:00:23:c5:30:84:b2:5a:
                    ea:95:c9:35:d7:ec:95:54:34:ae:33:51:0e:e0:91:
                    fa:58:9c:bb:f5:bd:68:68:b2:82:e2:b4:18:9b:cb:
                    c3:23:4e:56:82:13:6b:5b:a3:83:fe:0f:a7:cc:b6:
                    e4:62:e5:2d:29:ef:e8:0d:b6:0b:8b:be:58:f9:c8:
                    5d:52:aa:85:92:bc:7e:08:a2:85:74:05:b6:0c:d8:
                    f8:23:f1:e0:04:34:3e:a9:25:47:19:6e:40:6c:f1:
                    98:e7:c0:c2:49:d0:f1:c7:3d:58:68:85:ca:37:bd:
                    5b:6d:9b:7f:7b:a7:32:7c:bd:87:0f:d6:e9:61:6b:
                    e1:b8:95:cd:cd:e0:8b:38:45:1a:2c:9b:f9:95:bf:
                    6b:a2:90:98:d3:81:2c:e3:85:39:9f:95:98:08:d9:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:35:A4:FC:06:7B:8F:7C:0B:D0:64:D5:2E:14:28:B2:AB:CA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:96:de:7b:ee:ac:ec:51:01:56:e7:4b:e1:0d:15:62:0f:
         6b:e8:7e:7e:88:d2:32:b2:98:10:0b:0e:04:50:ba:55:ad:5b:
         1f:43:5e:6d:ad:b3:77:79:d6:86:9a:dc:29:dc:7a:45:2e:de:
         07:6e:be:72:d7:65:9b:94:5d:cf:31:b0:ca:81:12:b4:d3:da:
         e9:ed:05:da:93:c5:d7:58:2a:24:cb:9f:d3:b8:0b:7f:38:0a:
         db:08:1c:6f:4a:f3:4e:31:07:94:30:6e:13:68:8b:4b:9a:57:
         b6:9d:d7:bb:65:f3:e9:39:5d:24:ea:af:68:3e:0c:d2:ee:19:
         4c:bc:65:7a:5e:0b:25:f7:3c:b0:c6:1d:ae:1d:82:78:ce:78:
         84:20:d1:2c:bd:9b:24:87:3b:71:5a:1d:c0:88:be:a3:bc:62:
         17:64:fb:66:58:cc:3d:85:a5:66:80:1b:20:0a:02:00:82:78:
         9c:03:13:95:06:a5:69:f0:58:cd:1a:3b:3f:55:ad:b7:0d:47:
         9e:9d:71:23:9b:e6:1f:85:7b:1a:af:06:df:fa:8a:5f:3f:d7:
         3d:33:ce:27:1a:63:a5:26:53:bb:24:8b:7e:e4:4f:26:86:f4:
         30:37:66:69:4c:04:ce:15:2b:4d:d5:49:32:60:40:8a:59:54:
         f4:23:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:45 2026 by rpki-client