Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1008df5-d5f6-3f67-9489-98e89e57a88d.roa
File:                     d1008df5-d5f6-3f67-9489-98e89e57a88d.roa (raw, json)
Hash identifier:          5mbAHBYGzFm3qz+S0cf6mCNVaprMqX9NCif6dWcwFBY=
Subject key identifier:   06:0C:E4:22:0F:2B:21:92:7B:C5:B9:03:16:5E:FF:0A:E6:90:7B:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D869568E869E476F3B501E4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1008df5-d5f6-3f67-9489-98e89e57a88d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396542
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:68:e8:69:e4:76:f3:b5:01:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=beffa0c1-96ec-4bc3-ba13-86021e42b79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:e0:53:c3:4d:8e:0c:11:d5:78:cf:c4:00:
                    31:29:2f:e0:bc:db:5f:c4:ef:30:44:0d:dc:e0:70:
                    72:ef:f9:df:4b:b2:66:2a:3f:70:b9:81:2e:7a:2a:
                    6d:55:92:7c:98:7c:fc:4b:9f:bd:74:be:71:6c:42:
                    94:4c:87:d9:2c:82:48:7e:41:bc:5c:28:ff:8e:1d:
                    21:8c:2a:23:ef:8a:78:49:ff:f5:5f:23:3a:0c:a5:
                    6f:bf:08:db:1d:20:15:16:97:9a:85:f5:be:63:88:
                    f9:e5:4e:3d:f4:7b:b8:45:72:1a:2a:49:c3:78:1e:
                    8a:89:f2:b0:b6:fc:2e:f5:7a:b7:ff:b7:da:21:7a:
                    3d:9b:9d:dc:f6:ab:1d:06:46:f0:6b:fe:aa:53:67:
                    78:b1:9f:77:88:3c:c5:20:aa:9b:da:9e:39:88:a1:
                    29:8a:80:84:7a:f8:d7:69:2d:32:a0:a8:ae:06:a5:
                    6b:68:f7:23:2f:12:6c:03:5c:d3:6a:3b:e1:ad:31:
                    f1:33:0a:96:dc:07:18:94:2a:c2:b6:e8:c8:1f:d2:
                    fc:72:49:7c:2a:3e:3d:21:bd:21:4c:98:7d:91:7e:
                    2e:3f:0e:67:8b:9b:8c:68:01:33:b5:e6:30:08:f4:
                    3f:97:b1:de:82:80:d6:3a:7c:ae:6e:26:14:c1:1d:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:E4:22:0F:2B:21:92:7B:C5:B9:03:16:5E:FF:0A:E6:90:7B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1008df5-d5f6-3f67-9489-98e89e57a88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:07:f9:f8:88:d3:9c:ac:fb:a9:09:41:c1:07:e6:e0:d1:70:
         b5:a5:7e:9c:34:63:01:0c:94:ba:82:db:e9:29:cb:d4:f7:96:
         bc:03:9b:81:0f:ad:68:ce:e7:59:7e:4b:90:7e:ad:ce:3e:60:
         0f:0e:93:bb:e2:f2:c4:19:fc:cc:52:d4:8b:05:3c:ea:a7:b0:
         d0:2f:e8:5b:64:1c:d0:0a:0c:a0:63:9a:9a:d4:d8:b7:97:3e:
         8e:4a:ec:d1:fc:52:4c:3f:4a:58:57:ee:fa:67:e2:87:2d:f8:
         d4:c1:ad:76:e8:42:54:5b:9a:a1:aa:50:b2:04:7f:2e:d7:35:
         f1:7e:50:52:66:f3:2e:43:1d:26:23:0a:c5:fe:10:34:98:e4:
         25:f5:98:98:2d:53:ab:43:7a:58:a2:5c:19:07:b6:47:92:47:
         d9:a3:d0:ba:85:12:bb:58:13:56:66:fd:47:7c:66:4c:44:47:
         93:45:e9:94:25:c1:f0:6d:e7:27:59:8c:96:a8:db:be:0d:df:
         bb:21:45:43:a8:b7:d2:18:1f:3e:83:5c:c8:8a:8d:c1:7b:b3:
         62:c0:72:78:c5:6a:48:b0:fa:15:42:4d:fd:d5:36:46:27:d0:
         a4:9b:3c:c9:38:d1:8a:15:9d:3d:f9:24:e4:0e:fd:23:3a:f0:
         49:21:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:29 2026 by rpki-client