Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e03361b2-cde1-32af-9a8a-df5db79deb3c.roa
File:                     e03361b2-cde1-32af-9a8a-df5db79deb3c.roa (raw, json)
Hash identifier:          7TCCAacZAWzs6pkJ1wuJ4c/kVfaQmrwpNo3Xgd+GV4M=
Subject key identifier:   BD:36:59:8F:BF:E8:4F:82:D2:70:01:56:1B:49:9A:8E:D9:03:7D:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA9507C613A403382F3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e03361b2-cde1-32af-9a8a-df5db79deb3c.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     397197
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:95:07:c6:13:a4:03:38:2f:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=ce565639-5f27-4fd1-835f-e5faf17950cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:48:14:08:e9:21:b7:4c:4f:78:78:90:95:
                    7b:59:a0:a3:9e:a0:96:7e:84:aa:46:34:bb:46:c2:
                    c1:27:e2:fe:99:cc:b1:16:3c:c4:f8:00:ee:e5:e3:
                    bb:c4:6b:87:1b:79:af:11:52:12:17:b0:b2:39:27:
                    ec:27:a9:d5:84:90:c7:2f:40:61:68:1b:5c:02:e0:
                    0e:90:5d:0f:0a:88:fd:9c:f0:86:93:f7:09:a9:7f:
                    85:c1:4c:a4:7d:71:70:54:41:ba:66:4a:f2:9a:b9:
                    e7:8d:9b:2b:14:52:59:73:ef:40:9c:d9:31:1b:0c:
                    c6:c9:16:dc:f3:44:e4:d7:4c:0a:48:b5:ac:7a:a9:
                    14:bf:b2:7a:74:b5:04:69:22:2e:24:6e:5b:f4:4f:
                    5d:70:85:4f:75:b1:de:94:f8:a2:52:fb:6a:fd:8b:
                    43:ff:dd:76:5b:33:57:90:29:7d:4b:e9:14:e7:d6:
                    68:3b:6a:81:21:36:f3:fc:57:0b:c1:e0:90:fe:62:
                    d8:0d:16:d8:6c:24:f9:aa:8d:7a:5a:cb:af:e8:b4:
                    51:9a:f8:d3:af:33:e2:b8:2e:e5:e7:7d:f4:44:36:
                    63:49:2d:03:57:03:22:9c:4c:bc:10:fc:4c:3a:af:
                    80:14:66:26:f3:5d:8b:af:0a:6c:f2:35:b6:70:8b:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:59:8F:BF:E8:4F:82:D2:70:01:56:1B:49:9A:8E:D9:03:7D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e03361b2-cde1-32af-9a8a-df5db79deb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:72:bf:68:72:c6:34:9c:0f:28:a6:4c:18:18:63:15:49:
         ff:4a:de:9f:51:65:9d:3c:8e:67:ab:b0:d9:b6:ea:fc:bd:d3:
         3c:45:95:10:00:19:f6:9e:0c:7a:d6:66:e7:29:14:a7:0b:58:
         3a:89:42:48:2d:87:54:82:24:d5:c9:34:9a:8c:1e:9a:3b:57:
         dd:4f:99:53:b8:52:4a:8a:1a:13:b7:53:c4:48:f4:4d:53:53:
         05:fd:07:46:54:37:06:57:c5:9f:ac:68:6c:1b:90:f7:65:cd:
         2a:41:f3:92:09:3b:6a:34:5a:a0:0a:fc:69:63:5b:4f:64:7e:
         31:30:f8:f0:e2:3a:ca:0e:d2:04:2b:5c:40:c7:17:72:2e:5a:
         dd:a5:6a:30:25:a0:99:b1:c2:04:2b:b7:3e:44:2e:2a:95:6b:
         42:10:2e:fb:ee:c2:ad:4d:ee:57:5f:09:cb:1b:fb:20:55:06:
         3f:4b:83:52:4b:e9:31:b3:db:38:c0:b4:8d:8d:74:70:20:90:
         ed:0a:55:a4:3b:0c:23:1f:40:47:27:33:d4:ab:ca:8f:91:41:
         ab:3a:33:9f:98:2b:a7:0f:9a:06:7a:6c:ab:0c:93:a0:cf:ff:
         86:5d:f3:c3:71:bd:25:0f:49:61:67:49:e7:b8:bd:92:6e:57:
         da:9a:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:47 2026 by rpki-client