Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d543e880-b44a-390c-ab4d-45bf2e7d75b5.roa
File:                     d543e880-b44a-390c-ab4d-45bf2e7d75b5.roa (raw, json)
Hash identifier:          DvFabKfn0ThIlzlWOsLx2oakJw62NVEocCVO1lFrLzg=
Subject key identifier:   EB:4C:4D:3D:0A:B6:1A:67:D2:61:62:A2:51:0B:B0:22:C9:28:C7:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87FED6ACFF361E2AA43500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d543e880-b44a-390c-ab4d-45bf2e7d75b5.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396597
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:fe:d6:ac:ff:36:1e:2a:a4:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=e481dcd2-4685-4220-b464-c55f8ad8fd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:08:f8:d8:df:c6:25:dc:82:bf:66:7b:41:
                    94:ac:f2:c0:71:ac:e9:25:42:8f:97:d1:fd:0f:32:
                    63:34:d5:49:6a:e3:c1:5e:87:33:8c:5c:00:7b:cb:
                    93:18:82:24:1a:23:6c:7e:c8:fc:83:ef:01:b5:d3:
                    ca:b5:73:b8:15:3a:4b:df:71:77:92:c5:c8:88:da:
                    a0:a7:12:a6:ca:b6:c2:de:c1:86:74:a4:8d:9b:c3:
                    2b:e0:be:44:c8:da:6f:49:b7:c4:bd:8b:85:b4:c6:
                    12:a4:7a:a3:76:f6:f4:19:5c:28:37:aa:de:06:e3:
                    6a:dc:bf:c7:26:3d:f9:f7:31:e7:9c:d8:ef:d0:cf:
                    6d:be:e6:1f:26:b4:5d:95:4b:46:0f:c2:e4:e1:9b:
                    69:0b:c7:ef:8d:43:9d:dc:2e:50:a7:24:0d:bf:e8:
                    e3:cc:a0:08:73:0b:2c:89:18:12:79:ca:dd:59:cc:
                    80:25:98:a7:42:16:a0:b9:e8:ae:83:ad:45:19:e4:
                    dd:bc:79:48:14:a3:9b:2e:74:88:0c:8c:8f:b5:c6:
                    56:ad:df:1f:cb:83:a9:91:ed:d2:65:c2:39:fc:bf:
                    50:bc:c8:ef:16:40:a6:e5:f0:85:09:00:71:ed:fc:
                    65:cb:a8:4d:f9:b4:ba:ad:ae:a3:ec:93:fe:b3:42:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:4D:3D:0A:B6:1A:67:D2:61:62:A2:51:0B:B0:22:C9:28:C7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d543e880-b44a-390c-ab4d-45bf2e7d75b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:d0:a6:a2:b0:09:49:e4:79:8c:1d:ae:6e:a8:93:8d:56:
         29:9f:8f:74:0f:ab:5b:b6:35:83:f0:b0:d3:15:8a:f9:97:4d:
         df:06:91:cd:56:0e:2a:d4:53:27:3e:51:29:6f:d0:02:67:9b:
         6d:88:b6:46:c9:58:34:7a:4e:98:29:68:a8:ae:5d:3a:8a:4f:
         aa:8e:b2:a7:f6:6d:e6:fe:22:2e:9d:3f:05:7f:6c:35:68:ce:
         34:bb:a9:68:61:e1:6d:ca:69:77:ff:28:6d:6e:0a:07:a8:ad:
         2e:b5:bd:57:13:29:7b:ab:f3:35:02:82:6c:f7:e8:5e:85:b9:
         23:1d:4e:b5:60:49:19:c8:7e:03:5c:f8:6c:e2:12:f9:d5:89:
         d0:c4:b0:26:29:08:30:3f:7e:cf:dc:e0:f6:69:bc:50:01:42:
         be:ea:cb:c0:4f:6a:ba:22:47:89:21:08:0d:51:0b:02:b9:f9:
         22:81:89:ed:40:ad:be:9c:f4:46:ec:fd:07:41:8a:84:1e:ad:
         46:9f:01:0a:72:cb:26:15:db:07:07:5a:c1:31:a8:57:86:9b:
         19:0e:64:dd:87:be:70:67:a0:93:a2:59:0b:2e:2c:6c:02:51:
         81:ca:61:ac:3a:03:cf:79:42:84:ea:73:cf:61:60:03:97:b4:
         d7:fe:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:42 2026 by rpki-client