Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d650fef5-1f9d-3c77-92ad-9ed30323da66.roa
File:                     d650fef5-1f9d-3c77-92ad-9ed30323da66.roa (raw, json)
Hash identifier:          dnrvRXTYIhtayqWwt9KOgi/GfYrK9kyUia0dYh/m/sI=
Subject key identifier:   DA:D6:95:B5:82:20:96:35:95:49:7C:25:22:74:4A:B9:1D:E8:0D:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA19A9C635164AD88049200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d650fef5-1f9d-3c77-92ad-9ed30323da66.roa
Signing time:             Tue 07 Apr 2026 14:30:18 +0000
ROA not before:           Tue 07 Apr 2026 14:30:18 +0000
ROA not after:            Mon 06 Jul 2026 14:30:18 +0000
asID:                     396565
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:9a:9c:63:51:64:ad:88:04:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:18 2026 GMT
            Not After : Jul  6 14:30:18 2026 GMT
        Subject: CN=a52d1575-eb0f-4dc5-9816-58e6d54d1508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:a7:77:93:3f:7c:a5:37:7f:04:45:2f:4a:
                    95:76:2b:ca:c6:77:a3:ed:37:62:a0:1d:b3:ab:f7:
                    32:00:17:56:7c:70:70:d0:77:d6:fe:5a:e2:9d:c3:
                    d7:fe:83:cb:1d:6a:6d:37:25:ba:3c:e6:e6:be:d1:
                    39:52:e3:a2:b7:4c:e0:cc:dc:96:11:cf:69:16:b3:
                    23:e5:95:39:40:4d:7a:a1:02:1c:62:1d:74:7b:49:
                    0c:df:80:02:41:9e:dd:a8:98:5a:21:a9:dd:8c:bc:
                    dd:d5:b8:44:3a:4d:0b:b8:9d:a0:51:4c:d1:1c:45:
                    60:d2:fd:04:a3:a5:e2:57:aa:38:dc:61:f8:40:86:
                    67:b9:3b:ef:3f:9d:1e:cd:d6:68:aa:39:70:66:ca:
                    f2:ad:d3:7e:27:8c:5c:77:5e:28:e5:9b:75:15:d0:
                    89:5f:1e:45:33:00:a7:5c:26:a4:93:5f:78:e2:d4:
                    78:2a:5d:75:fc:7c:2b:83:de:22:b4:79:41:a1:87:
                    b0:49:2e:04:a9:2c:a8:c6:6a:0d:1f:8c:92:ae:0e:
                    88:55:9b:6d:8f:53:77:78:31:44:e5:83:02:56:08:
                    f2:7c:4e:81:d0:a0:5e:3b:e2:01:26:29:98:39:2b:
                    9a:da:74:9d:60:03:3f:e2:11:0d:f1:ec:13:2d:9b:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D6:95:B5:82:20:96:35:95:49:7C:25:22:74:4A:B9:1D:E8:0D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d650fef5-1f9d-3c77-92ad-9ed30323da66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:d7:a5:1f:fc:f7:41:6e:35:59:9b:78:da:0f:53:fc:b5:
         c4:a3:37:43:6d:3b:10:be:cb:9a:9c:73:89:39:5f:b5:fe:c9:
         11:87:84:06:f0:6a:84:73:0d:4d:73:81:7a:3c:96:c6:cd:2d:
         91:ca:21:6d:e9:d8:ba:92:f6:f7:c7:af:5e:04:7d:4f:06:ca:
         f6:54:02:ad:ea:35:13:fe:b4:e2:02:d2:8f:07:ce:54:ad:d1:
         b1:05:16:37:93:f0:2c:18:06:bf:5f:04:c7:c7:e9:a6:23:60:
         a3:50:f3:34:01:4f:05:0f:6d:29:ff:1f:c8:cf:9b:09:11:a9:
         ca:83:5a:d0:67:0c:c9:d4:3e:f4:92:f0:33:6c:8f:b1:8c:a0:
         ae:a5:9c:2a:4e:97:09:ae:5b:b8:fc:a8:c5:f2:d4:63:e9:87:
         f1:05:c4:2c:12:cf:5a:db:41:b1:fd:36:b4:aa:25:d0:b3:ef:
         da:ef:6d:71:d2:b7:a1:be:39:77:7d:83:91:9d:74:ca:1b:4c:
         f8:e7:2d:77:10:78:b7:20:8f:eb:b0:ce:03:a3:86:0b:9e:9e:
         ba:52:c8:0f:c4:0b:6e:08:bf:d0:ee:4a:c4:aa:60:d7:06:80:
         65:88:f3:5c:b6:5d:01:da:f8:5e:02:f8:40:97:97:ee:65:9e:
         07:f4:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:55 2026 by rpki-client