Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4763835-eb2b-3e03-bba0-1038d9e0498a.roa
File:                     d4763835-eb2b-3e03-bba0-1038d9e0498a.roa (raw, json)
Hash identifier:          IWfYoT3luQmkpjhlUwQezyXi0kYe7iAI+w5pUWy++jQ=
Subject key identifier:   C5:75:E8:53:D0:0D:AA:42:50:CA:76:4C:8B:9B:DE:E8:B3:FE:E0:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE5E45BC3905C3DC26900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4763835-eb2b-3e03-bba0-1038d9e0498a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396610
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e5:e4:5b:c3:90:5c:3d:c2:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=bafd5f55-0aaf-4985-a98e-b15a855a76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:a0:ba:00:2d:37:ab:28:75:ae:ec:4e:e6:
                    16:3b:be:c7:cd:9a:10:78:98:67:c2:8b:4a:96:26:
                    67:97:f5:8f:d7:6b:06:e1:71:5c:82:0b:58:10:ca:
                    10:cf:9c:e1:b8:d1:b4:29:70:9d:62:f3:d9:d0:e0:
                    8c:5f:92:d6:5d:f0:2a:03:17:bc:e5:32:83:d6:09:
                    1a:9e:bf:1a:e3:c0:09:8d:0b:01:cc:23:3a:b1:21:
                    57:8f:6b:f7:da:1e:74:1e:20:16:21:8c:3a:62:8a:
                    4c:c8:3e:14:e0:a7:4f:a5:59:1d:38:2d:16:64:a0:
                    09:ac:de:ef:48:d7:52:c3:50:0d:6b:d4:63:80:24:
                    e4:ee:a6:a1:f7:94:ea:dd:49:ef:69:a2:5b:e3:a6:
                    30:01:34:5e:28:b4:3e:50:01:d9:de:54:8f:d8:b4:
                    3d:ec:89:9e:6a:69:73:37:73:b9:62:50:c0:3e:9f:
                    d3:c0:1d:3c:f3:10:cc:53:69:b3:f2:9d:0c:b2:cf:
                    59:a9:0b:8d:01:62:89:3b:6e:2e:cf:21:8a:b8:d2:
                    e3:c4:0c:91:71:5f:8b:28:d8:c6:59:85:5a:32:6d:
                    cb:27:a4:d7:cf:24:fa:11:36:31:d7:52:66:b9:d3:
                    94:fc:97:c7:d9:c0:71:29:57:f6:7d:e8:c9:04:c5:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:E8:53:D0:0D:AA:42:50:CA:76:4C:8B:9B:DE:E8:B3:FE:E0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4763835-eb2b-3e03-bba0-1038d9e0498a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:98:c2:59:ef:a4:1e:5c:4d:e4:0b:c8:20:4d:67:e9:ab:3e:
         b5:1a:fb:12:4e:a8:8f:d5:90:c4:83:53:dc:fc:f8:03:a7:54:
         1a:63:1e:8d:31:94:86:40:66:ae:f6:76:bb:da:5e:22:63:4b:
         3e:ff:44:8b:00:e2:a0:c0:25:27:dc:af:d6:b3:ba:2d:1a:44:
         ad:0e:a3:f1:53:21:0d:56:b6:5b:46:92:97:e9:7b:0b:f5:5c:
         2c:f9:be:6e:9b:43:a6:86:b5:12:f1:c6:66:20:27:3e:f9:f9:
         76:b6:eb:dc:38:af:d7:3a:fd:5c:aa:db:af:c7:fe:70:21:5d:
         e3:71:10:24:42:06:9b:a4:4c:ac:fc:2b:4a:96:3a:b4:ee:4d:
         e6:68:c9:10:fd:36:a8:b3:c7:3d:6f:4e:24:40:83:08:af:c9:
         e2:ed:cf:ee:62:db:a8:da:08:b5:ab:d7:cd:f8:69:7e:f8:cc:
         9c:70:8c:67:36:7d:60:ab:68:a3:16:98:77:cc:7b:a2:95:a3:
         d6:cd:e6:46:d8:b7:0d:6e:5c:a4:b4:2b:e5:f5:04:ab:14:f4:
         89:f4:a5:be:7e:2a:fd:bb:6b:e3:69:4f:e8:14:73:20:4d:0d:
         96:ad:53:66:f8:0d:ce:1f:c5:d9:97:58:fd:35:c3:1a:48:ea:
         98:0b:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:49 2026 by rpki-client