Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
File:                     d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa (raw, json)
Hash identifier:          7QBlBD677renEINJHNm4Im97mhSQQLzwZ+xKKPhYY60=
Subject key identifier:   D5:2C:9E:58:D2:15:BD:6D:A2:EA:AD:C0:AA:FB:23:4E:DB:10:15:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA77041D98C541BD7505C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396576
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:77:04:1d:98:c5:41:bd:75:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=69b4435f-ae6d-4fd6-b8b6-1ef954cb7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:a3:35:b1:29:ba:e0:ea:bc:58:40:e2:c0:
                    e7:bb:39:e9:b0:cb:81:36:fd:bd:85:81:55:5e:8b:
                    e8:cd:db:65:a9:b0:9e:53:cb:54:6a:dd:83:3c:c5:
                    77:2b:2a:69:0c:82:af:31:00:e9:04:b8:3f:71:20:
                    91:38:5e:1e:18:f7:6e:ac:96:b6:20:46:a7:18:5b:
                    be:d0:de:8c:96:dc:af:99:45:42:5b:4d:17:97:73:
                    df:54:b7:21:c6:20:c7:70:ae:34:6b:6a:2c:b2:9c:
                    fd:c8:cb:14:c8:0e:ee:5b:e4:6c:8c:17:71:9a:48:
                    1c:37:f6:45:cd:bb:77:94:6e:be:49:6b:05:0e:7c:
                    97:28:0d:60:4c:64:89:f5:05:1b:a2:45:2d:b2:ed:
                    b0:cc:60:8c:4c:fd:e1:34:9d:df:99:db:9a:6d:27:
                    bd:b8:c7:73:75:96:9e:9c:fe:2d:1c:27:9c:87:26:
                    b6:be:42:0d:52:92:06:76:32:6c:6d:5c:9f:76:99:
                    ac:b1:41:86:7d:e6:18:b0:a2:f1:e0:51:5d:8a:f6:
                    37:86:27:1f:7d:66:e5:0a:16:ab:c0:34:66:43:90:
                    8c:56:85:1a:0a:33:1f:11:6f:ae:3b:15:c8:de:62:
                    e9:f6:19:9a:55:26:02:1b:7c:e3:28:19:23:5e:af:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2C:9E:58:D2:15:BD:6D:A2:EA:AD:C0:AA:FB:23:4E:DB:10:15:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:6a:37:fe:4c:6a:09:0b:92:cb:da:24:2c:f2:d9:77:65:
         7a:1e:24:33:0d:17:92:52:a3:25:34:e2:11:df:53:74:7c:52:
         22:6d:52:84:f9:16:f8:66:b0:b2:63:46:3d:ee:c4:75:05:b3:
         dc:e8:cd:47:30:6e:3f:71:86:c0:90:47:35:0f:71:fc:51:66:
         f8:0f:ab:b8:74:29:a1:85:a0:50:91:2e:9a:04:cc:fa:65:74:
         ed:3f:f3:d0:39:8f:e7:5d:0b:3d:30:d1:aa:f1:a6:42:e3:9b:
         f4:ad:d1:66:4c:8b:62:90:3e:f4:98:ad:60:92:35:f5:db:2b:
         02:e5:a3:56:4b:80:5f:a0:d9:d9:54:b5:27:37:79:00:44:70:
         1d:4d:34:1e:29:a8:57:3a:19:67:fe:48:a2:61:50:81:04:8f:
         4b:96:37:8a:7e:ad:6c:00:88:cb:48:03:bd:c4:8e:13:fa:ae:
         d9:ca:b4:aa:5e:be:53:7c:01:cf:a5:28:cb:ad:4f:89:1e:27:
         82:5a:f9:d3:38:70:cc:47:64:6c:78:dc:d2:64:a5:7e:f9:11:
         d0:56:d5:b7:02:26:84:e8:c8:fd:31:ac:5e:a0:1b:7f:5a:eb:
         ea:72:5b:bd:20:f7:59:24:c5:99:a8:ed:0f:96:4a:5a:78:1d:
         60:c0:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:08 2026 by rpki-client