Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3467507-791d-3beb-92f8-c85a74d954bc.roa
File:                     e3467507-791d-3beb-92f8-c85a74d954bc.roa (raw, json)
Hash identifier:          MnMmr+u62IroOLREtOklcbe7yR0PIQxdl6/TvzYAGn8=
Subject key identifier:   C0:AD:CF:68:AC:BD:AC:8F:EF:F1:E4:5E:5C:1C:73:40:6F:73:A8:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF9D8927AB7AF78157980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3467507-791d-3beb-92f8-c85a74d954bc.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396571
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f9:d8:92:7a:b7:af:78:15:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=8581a31f-1d26-4b4b-b80d-644d0ef74f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:b5:91:04:5e:25:69:ca:da:53:f8:ed:32:
                    31:45:7e:6a:9e:fc:01:7c:eb:f0:e5:65:ba:89:3c:
                    90:90:9d:a5:4a:73:6c:44:62:b7:81:80:6d:e8:50:
                    26:b6:87:b8:23:53:46:58:9c:1a:6b:20:1b:c0:9d:
                    29:b3:86:22:d0:5e:68:57:86:e9:13:60:8a:80:d0:
                    49:75:4a:23:89:ad:b9:af:b7:b9:e5:c6:f1:cf:20:
                    30:39:04:d2:2a:1f:66:5d:27:07:d0:8f:83:19:83:
                    3e:88:4c:de:95:ba:65:73:7c:2f:02:65:c2:57:b4:
                    29:64:c0:2b:97:2c:f2:5c:12:34:43:b5:50:9e:41:
                    7f:42:09:aa:a5:0d:13:38:48:a7:54:ad:97:21:a0:
                    fa:65:4e:64:23:5e:df:bd:1a:6a:1a:61:88:13:bc:
                    3d:16:97:2d:8d:fc:3c:65:42:e0:2c:a4:05:09:9c:
                    0a:01:14:88:65:e1:f0:e5:56:45:05:f0:26:35:26:
                    98:ac:68:b5:16:dc:6a:f7:11:8c:25:51:f0:e2:60:
                    16:a6:36:16:d8:7f:d7:4b:89:e3:e5:8b:86:f0:00:
                    16:62:5f:d9:51:7c:c5:08:04:73:cf:d4:69:84:5c:
                    ba:06:90:f4:f8:0a:92:46:0e:4c:a8:c1:9c:de:13:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AD:CF:68:AC:BD:AC:8F:EF:F1:E4:5E:5C:1C:73:40:6F:73:A8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3467507-791d-3beb-92f8-c85a74d954bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:38:45:82:56:d1:9f:14:7c:37:20:cf:96:0d:7f:a4:9d:
         d2:a0:4a:38:7a:4e:9b:de:39:44:2d:21:91:bd:0e:06:6c:86:
         eb:8c:82:a9:00:1c:16:bc:82:b1:c2:ae:fe:6e:45:fe:ff:3e:
         ec:1f:03:0a:2d:85:5c:6a:47:e0:4a:0a:f2:62:5e:e4:e9:8e:
         8c:8e:14:41:13:46:e1:09:2c:f8:a1:dc:1a:53:98:68:01:fc:
         60:a6:5c:84:1e:a4:1f:1c:22:55:41:34:20:95:bc:49:ca:71:
         2e:8f:29:a3:28:da:9b:91:29:2e:2b:1a:da:24:07:fa:b4:2e:
         65:ba:0b:0a:b4:22:aa:08:95:b6:77:2d:9a:fb:d5:b2:2a:39:
         e9:2c:4f:79:0e:0e:ee:a7:44:6f:6b:6f:b9:7a:ff:d4:da:5c:
         9f:5a:ee:a4:f3:fe:f4:c4:5b:c1:91:81:8c:a9:c5:c7:73:8a:
         19:f6:e6:b8:11:92:35:7e:c5:b5:55:c7:9e:6e:bc:d3:8d:0d:
         24:fc:2b:d9:4c:7a:15:3d:7f:fd:16:2d:5e:64:3a:9f:5e:c7:
         f0:80:db:2f:e6:fd:c2:f3:8a:36:c3:9b:47:ee:1b:0e:1d:96:
         45:0c:48:df:d6:b8:d2:67:4a:a0:cd:1f:ea:b6:bf:b4:d5:36:
         52:f0:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:43 2026 by rpki-client