Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6b86a7f-a1eb-3b94-abbb-c1e74f2f550b.roa
File:                     e6b86a7f-a1eb-3b94-abbb-c1e74f2f550b.roa (raw, json)
Hash identifier:          G/j8/eOXI6RgqxoE2I9neplGnMoUZjWlCKqiA7aI3v4=
Subject key identifier:   74:A8:FB:F3:29:9D:36:F6:ED:C7:B7:A3:E3:FF:B2:89:5E:CC:62:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF41DAC8EEA1B50393C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6b86a7f-a1eb-3b94-abbb-c1e74f2f550b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22547
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f4:1d:ac:8e:ea:1b:50:39:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=abcfb94e-3a9d-4f2d-b87f-b9fbc258101a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:b0:32:8e:5d:b2:0f:cd:24:49:ff:42:66:
                    eb:f0:8f:00:56:6e:11:fb:0e:31:30:64:13:c1:93:
                    cd:cf:91:84:51:d2:69:fc:d2:18:4d:85:cb:cb:a0:
                    0a:c9:c5:50:c9:b4:06:d5:fc:e9:a7:e3:80:04:6e:
                    1a:95:a7:1c:f9:65:18:d0:48:92:3e:bb:4e:5c:a1:
                    94:71:95:1e:98:22:26:68:aa:47:4d:83:61:dc:ed:
                    12:c6:41:c7:61:f6:e6:bc:e1:c9:73:4e:fc:cf:10:
                    8f:4f:18:29:16:3f:72:76:30:34:be:af:ab:59:19:
                    18:fe:ea:ef:70:ea:ac:99:12:a4:cf:e9:a9:61:09:
                    51:71:bd:2c:6f:44:6d:19:b2:ca:cc:93:8f:54:79:
                    04:f5:07:02:e3:08:dc:f3:84:58:fb:39:b6:8e:86:
                    53:e8:82:49:06:81:a3:25:bf:8c:61:c2:e6:71:72:
                    89:79:06:10:a9:7a:2a:f5:47:97:d2:09:9d:6b:b3:
                    1e:e7:1f:72:6f:89:ae:9f:a4:01:c3:b6:d0:9b:d9:
                    0c:d1:ea:e7:49:b4:68:3c:5f:60:2d:d8:29:33:b5:
                    dd:25:50:06:d0:5b:db:1b:c0:90:71:c6:90:4d:1b:
                    b0:d1:02:34:fd:26:24:25:41:dc:ee:f9:87:e2:ca:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:FB:F3:29:9D:36:F6:ED:C7:B7:A3:E3:FF:B2:89:5E:CC:62:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6b86a7f-a1eb-3b94-abbb-c1e74f2f550b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:8f:f8:87:2f:c2:e4:2f:11:dd:50:8e:5e:fd:3b:6e:37:
         e0:b6:e7:71:1f:d6:2e:72:00:16:74:c4:36:a1:54:40:09:4e:
         4d:80:56:34:dc:e7:3c:83:90:9d:a3:47:d7:7b:c5:f7:5e:44:
         ce:dc:d2:36:c9:ad:f7:7f:8c:32:66:bf:f5:d2:5a:d3:78:0e:
         7a:2a:01:4a:fa:28:df:f5:2f:f8:87:42:3e:e5:9f:3e:8f:ed:
         73:67:71:87:19:38:1a:3c:fc:f5:57:ad:34:1f:1c:6e:c5:e9:
         d5:73:44:6d:32:c1:bf:64:fc:d1:8a:77:8c:71:57:10:18:67:
         02:43:cf:52:ee:cc:c3:a8:70:24:06:d2:38:9e:3a:0a:91:ed:
         e3:ab:91:d2:83:f7:58:ad:d9:b7:95:b5:10:d7:eb:04:aa:9e:
         c1:8e:74:39:32:46:e8:af:e5:eb:e7:ff:fc:26:fb:69:a8:0d:
         ec:e6:71:a0:fe:f0:f6:a9:1d:9c:ba:c7:0b:49:ff:23:17:00:
         09:f4:50:59:d6:5c:b0:4e:6b:a3:73:71:2d:fa:8b:4a:0f:85:
         d6:23:1e:e3:45:c7:e6:34:1c:cd:25:2b:ef:67:8d:0d:b3:e1:
         6a:5c:96:98:89:44:6b:00:bc:e2:43:f7:9c:03:6e:f9:64:8b:
         99:bd:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:10 2026 by rpki-client