Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c0c9d4-df37-3f93-83a6-2fe25bd0415b.roa
File:                     d6c0c9d4-df37-3f93-83a6-2fe25bd0415b.roa (raw, json)
Hash identifier:          4aNp9Ny+1RTCtkKZJQt3oz56nKMcnaFA3kwKDwPhh9M=
Subject key identifier:   98:23:F1:E1:45:14:7A:47:E5:0F:44:B7:79:47:D5:4A:5D:2C:05:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE9318381EBAEF6427E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c0c9d4-df37-3f93-83a6-2fe25bd0415b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36628
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e9:31:83:81:eb:ae:f6:42:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1510106f-55f8-445d-88cd-af93ecbb619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:b6:e8:4d:70:3e:d9:7a:a9:18:3a:c3:e7:
                    3a:50:00:16:9a:dd:a6:1c:4d:cc:e2:29:ea:57:2d:
                    b1:f5:3c:48:29:8b:6e:2e:52:78:89:f0:0f:26:9c:
                    84:8d:fd:ca:21:e1:13:6b:2f:ca:53:72:43:49:07:
                    0f:a7:6d:05:95:11:9f:af:35:0b:6d:bf:bf:21:c9:
                    a1:65:97:65:41:29:fb:3f:49:59:cb:f2:e5:80:9a:
                    20:28:41:ab:2e:05:1e:03:41:68:10:ca:3b:2f:88:
                    c7:93:5b:b9:34:3b:f7:b8:de:82:7c:8b:f4:69:77:
                    b0:9c:94:96:98:e0:52:c9:e8:a0:69:9b:d2:b9:0b:
                    76:0a:f3:19:3c:11:d8:02:2d:0c:39:14:28:34:1c:
                    7a:88:10:a8:05:bf:46:fe:f2:1b:dd:84:2e:60:e8:
                    71:5a:2d:e3:a5:3e:1c:01:91:0d:2c:09:4c:34:9a:
                    fc:4a:e7:e3:4b:77:ae:8f:32:ba:cb:25:78:66:66:
                    7d:e3:9a:4f:8f:24:4a:ba:20:5b:ad:2c:9a:4d:b1:
                    ee:ab:50:f9:e5:ee:33:fa:14:04:ea:7a:37:7f:f8:
                    0f:88:14:c5:d2:a7:bf:a5:73:9b:e4:6b:5a:13:6b:
                    55:38:c6:4f:14:0d:4f:dd:96:af:18:0b:c1:90:8f:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:F1:E1:45:14:7A:47:E5:0F:44:B7:79:47:D5:4A:5D:2C:05:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c0c9d4-df37-3f93-83a6-2fe25bd0415b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:04:fa:03:34:36:34:1f:43:ba:e3:d8:d1:b6:e3:77:e6:
         b7:33:f0:d7:b9:2d:ed:66:e0:62:3c:d8:7a:d8:ee:50:d1:73:
         fd:a2:63:fb:98:95:af:2b:3b:00:1a:f3:fc:30:07:5f:66:03:
         f4:2d:12:96:0f:3a:d7:a4:87:e6:28:fb:96:fb:a3:44:d1:56:
         a4:0b:f5:3a:74:df:55:3d:f2:bb:08:24:06:80:ef:39:ad:d2:
         f1:d7:c5:c2:e2:86:7a:44:29:98:b6:37:32:9d:46:7d:60:b9:
         69:32:be:fb:2c:64:a7:67:a9:0e:ca:5a:8e:35:dd:aa:26:3b:
         fd:f5:9d:4a:ee:83:90:e5:84:84:c5:f7:6b:a9:bb:72:d6:01:
         6e:3e:29:d0:17:0d:53:5b:ed:dc:dd:7d:3e:4f:94:79:de:4d:
         40:94:26:b0:76:7b:9a:43:7a:15:34:cc:41:97:4b:97:46:b1:
         e4:bd:b1:e4:94:1b:e9:bc:d6:31:a5:6c:cf:22:3b:8a:c0:aa:
         5b:0d:a0:d0:5e:82:06:50:52:32:f3:d4:35:c8:df:f2:83:b3:
         19:1e:54:4f:96:cd:05:5f:63:83:8b:e0:fd:25:59:c4:b0:58:
         7c:2b:3c:ba:06:03:7f:05:7a:2b:63:f5:28:a3:38:67:80:a3:
         76:07:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:39 2026 by rpki-client