Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3fd661b-18cb-3ed1-9e99-f1c706283e68.roa
File:                     d3fd661b-18cb-3ed1-9e99-f1c706283e68.roa (raw, json)
Hash identifier:          R+7oWltmt8Vk6NhABtb2d0EsROiAtxOjABjyorSjw6A=
Subject key identifier:   B0:EB:E8:AF:C9:0F:2A:EB:8F:D2:E2:EE:EE:C4:BF:8D:13:EC:BF:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEB43AE0DC8BC9DD1FD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3fd661b-18cb-3ed1-9e99-f1c706283e68.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396583
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:eb:43:ae:0d:c8:bc:9d:d1:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=75f19787-3b35-4bfd-9c12-fbb626c5b90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:95:67:14:ea:3b:3e:66:46:5f:fe:e8:c8:
                    b5:58:e6:5d:38:2e:21:6d:41:8a:92:48:c2:14:36:
                    f4:91:c8:46:1b:44:04:4c:a6:a4:37:38:b6:75:9e:
                    16:a4:80:5f:e9:15:7d:ab:40:12:52:1b:9d:70:84:
                    62:4d:86:ef:5f:83:71:74:ee:02:35:f4:05:5d:75:
                    55:30:3d:5a:8f:91:20:7d:c4:8b:b1:b2:09:61:70:
                    1a:ce:08:66:ec:72:f0:98:0d:50:7e:f7:c9:d1:e8:
                    42:63:94:48:bd:b5:c6:80:93:c3:5d:44:e9:a2:74:
                    04:3c:f7:42:39:53:b6:3e:d8:62:93:7d:22:4b:a9:
                    64:0c:ac:28:b3:da:6f:60:ce:15:6c:d5:85:7c:a4:
                    e8:89:0b:82:29:d8:0a:98:3c:30:9b:f4:5a:ff:9b:
                    f9:6e:a9:ad:28:2f:16:71:fb:73:9b:fd:6a:7c:24:
                    61:ff:16:bd:db:49:18:a6:d1:af:1e:78:32:ca:33:
                    ae:4e:51:38:25:b9:fb:e4:7e:9b:03:a8:6f:53:a4:
                    0e:83:fa:02:9e:6a:61:15:91:90:ec:9e:d8:12:e9:
                    62:7d:88:cc:0e:0f:a2:bf:05:33:88:d0:04:53:26:
                    a2:e6:eb:ab:ec:b7:6e:81:c5:94:87:5c:2c:08:12:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:E8:AF:C9:0F:2A:EB:8F:D2:E2:EE:EE:C4:BF:8D:13:EC:BF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3fd661b-18cb-3ed1-9e99-f1c706283e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:33:40:0f:8d:f0:f4:0c:1b:e2:34:1e:8b:41:fe:70:4e:
         1f:00:20:8e:9f:cb:a2:a5:e9:d4:02:7c:0f:84:c7:e4:84:52:
         ac:ef:c3:29:25:16:3b:0e:8d:00:3c:51:58:80:96:aa:70:56:
         57:9a:1f:1e:39:e7:38:5b:51:c1:69:95:ca:75:8a:5e:eb:41:
         d2:65:cc:d2:86:f7:5a:8d:ae:7a:4d:e8:f0:69:bd:3f:bf:48:
         f7:06:f3:81:7a:f4:e0:88:b5:f7:8c:2f:95:5c:1b:2a:81:2f:
         08:50:57:f0:80:ef:1d:5f:9d:85:14:20:ff:ae:b5:e4:7a:d3:
         18:59:3e:aa:c0:8f:6e:6a:d5:67:08:f5:df:fb:cb:e7:b3:3c:
         6d:5e:de:36:06:7a:42:4f:c6:b9:a5:be:5b:11:05:28:91:26:
         73:35:e1:6c:ff:bc:fb:da:98:20:9f:cd:00:a2:8c:91:f9:63:
         63:5a:45:45:de:a1:c9:cc:0f:e4:e1:b2:9f:f5:7b:04:6d:94:
         9f:d6:41:fc:7b:60:c9:64:6f:75:e6:59:bc:4c:70:ad:4b:59:
         9e:7f:c3:23:c5:be:b0:13:91:8f:a7:fd:b7:f4:57:58:97:30:
         14:60:1d:d1:8d:8b:de:be:57:11:91:b0:99:de:f4:ce:5b:44:
         a3:97:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:25 2026 by rpki-client