Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd160192-b47c-3455-a1c2-399928578ed5.roa
File:                     dd160192-b47c-3455-a1c2-399928578ed5.roa (raw, json)
Hash identifier:          8XPv4TpFIQUuUS1lMEYuQM8H6o9yI+3T5BW1IGEpkvo=
Subject key identifier:   E6:CC:2C:9B:83:6E:C3:C2:9D:FA:91:CC:33:4D:1F:A5:6C:00:A9:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7DA3D0561A2EDDC13640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd160192-b47c-3455-a1c2-399928578ed5.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396576
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:7d:a3:d0:56:1a:2e:dd:c1:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=58afd55f-a4a3-451f-8041-abc2b07033b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:01:17:1f:97:11:b4:01:d9:d8:db:cb:b9:f1:
                    8e:d3:96:90:1c:58:e2:43:13:62:b3:33:1c:92:62:
                    83:4e:8d:61:78:e2:b7:be:30:04:af:10:1d:57:36:
                    1d:cd:e8:c7:fd:3d:9c:ba:74:77:7e:7c:48:cd:fb:
                    a5:69:fc:3f:89:99:5c:4e:69:bc:b5:29:f4:a7:31:
                    67:38:b8:8c:0b:77:6d:fc:95:79:60:74:77:00:03:
                    01:e8:5b:2c:4f:a0:01:f3:53:e2:4d:46:86:43:cf:
                    18:03:f9:f5:c8:0a:ac:43:9c:80:05:93:1f:f4:b9:
                    4a:6b:b5:74:dc:8f:1c:8f:c8:63:56:9a:e9:99:fb:
                    71:15:f2:09:5b:f3:cd:f9:00:ee:64:d3:ec:80:4b:
                    5f:1c:84:39:7c:9f:1f:d7:b3:b4:66:31:87:5a:80:
                    42:18:07:8a:57:53:d2:4a:79:2e:3c:2d:08:2a:d3:
                    c2:eb:31:67:c2:55:5f:95:5f:eb:f7:b2:00:83:b0:
                    bd:dd:38:06:2c:45:34:b4:6b:ca:06:91:5c:1a:e6:
                    45:0c:89:ba:fe:82:4c:d7:ba:bd:bb:41:e5:2b:ad:
                    f5:5b:bd:3e:ed:9f:72:62:2a:d3:87:b6:b6:a0:3c:
                    5a:a8:0c:62:4c:85:ba:74:cf:d2:e2:6a:4b:cd:2b:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:2C:9B:83:6E:C3:C2:9D:FA:91:CC:33:4D:1F:A5:6C:00:A9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd160192-b47c-3455-a1c2-399928578ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:3a:61:2d:01:94:49:fe:7e:36:e3:8c:6b:45:21:47:e8:
         88:c4:e8:31:02:ba:66:08:50:07:b5:eb:05:97:c5:66:17:2e:
         57:ce:aa:fb:92:a8:03:23:ad:38:12:76:8b:95:af:74:99:cf:
         2d:22:6c:33:64:e7:93:4b:c8:1a:90:79:8e:22:dd:f5:b2:24:
         3b:27:bb:1a:84:d9:ae:86:1a:bd:6c:77:dd:46:5f:5c:87:69:
         6c:6e:b9:75:e5:18:0d:39:c3:71:ca:28:ae:69:a5:44:3a:d9:
         aa:4b:43:ad:90:0d:db:e2:8b:5b:dc:88:27:2c:b9:49:8d:63:
         e4:34:aa:c6:ac:40:dd:1d:dd:08:80:7b:20:80:59:83:b3:9e:
         51:a2:72:2f:4a:4d:11:cb:a6:f3:27:5d:60:99:0e:48:9f:b0:
         98:55:34:6f:5d:a2:fd:99:d5:a6:36:7c:c1:20:5f:6b:5f:9e:
         57:bf:a9:fb:03:03:26:a6:42:92:08:63:87:5c:ba:52:13:27:
         89:0b:13:bf:12:9d:3b:db:97:ae:77:5d:c5:93:fc:65:50:63:
         6e:48:bd:a1:fb:32:d1:cf:7b:b6:39:e7:b3:30:a9:7d:98:8e:
         e1:7a:b2:af:67:3b:a6:42:97:77:62:ac:40:03:e7:1e:38:0d:
         db:7c:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:38 2026 by rpki-client