Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed00c25f-fda7-3eca-af8a-7c571c1d6277.roa
File:                     ed00c25f-fda7-3eca-af8a-7c571c1d6277.roa (raw, json)
Hash identifier:          N4NmorXaImcaJJhwrAjoMOEU3CovyJkOFExhCcVFnBA=
Subject key identifier:   01:5E:3C:12:E8:AB:EF:09:D4:FE:8E:F7:94:1F:60:4F:04:E0:6D:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD6F4854D2CF753C3B840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed00c25f-fda7-3eca-af8a-7c571c1d6277.roa
Signing time:             Thu 09 Apr 2026 14:07:52 +0000
ROA not before:           Thu 09 Apr 2026 14:07:52 +0000
ROA not after:            Wed 08 Jul 2026 14:07:52 +0000
asID:                     36623
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d6:f4:85:4d:2c:f7:53:c3:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:52 2026 GMT
            Not After : Jul  8 14:07:52 2026 GMT
        Subject: CN=ced83555-259d-4d52-af86-c8937fd93369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:6a:b1:aa:c9:0a:bf:37:90:be:15:77:c8:
                    ad:b9:74:ea:24:f1:a9:3f:bf:a2:34:b7:9a:01:b6:
                    85:5a:12:0e:7c:d2:4e:b3:d3:f1:f8:ce:fa:e8:cc:
                    82:98:f9:38:36:c2:33:70:1a:0c:3e:96:a1:31:12:
                    42:b5:41:3c:b7:80:c2:2c:b5:b8:12:a3:27:0e:d6:
                    b1:3d:d1:e7:46:14:88:d7:38:50:95:c3:da:f2:01:
                    3b:f1:ec:52:90:df:93:a5:4e:79:e3:7d:be:6e:71:
                    cd:80:bb:95:55:16:84:79:0a:fc:da:04:40:1e:dd:
                    1d:e5:17:72:93:50:45:23:ec:d9:e1:7b:26:1d:97:
                    79:c8:e9:26:a8:57:9d:7c:3f:ca:2b:36:65:20:a9:
                    09:4d:a5:e9:a1:de:f6:40:33:fe:3f:01:6a:c2:41:
                    0b:06:0c:05:9f:5f:3f:5d:09:b5:80:4b:e1:bd:aa:
                    25:d8:a7:e2:5f:31:99:b7:c0:46:63:25:40:bd:c5:
                    e5:32:d2:1f:77:97:01:e5:c8:3f:b6:bc:41:c7:06:
                    54:b9:1d:5f:59:b3:4d:a7:7c:06:ff:9a:6d:48:cb:
                    a1:a5:35:e2:95:1e:83:5a:eb:46:43:ec:5f:77:e7:
                    e4:82:bb:99:27:d9:ab:24:c1:fe:cd:d3:16:cf:b7:
                    be:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:3C:12:E8:AB:EF:09:D4:FE:8E:F7:94:1F:60:4F:04:E0:6D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed00c25f-fda7-3eca-af8a-7c571c1d6277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:df:bb:a5:fd:f8:5b:77:b1:7f:49:3f:62:c3:69:dc:5a:37:
         3e:9a:76:1e:53:bf:24:b5:16:f6:c9:12:33:ed:d5:c9:20:7e:
         ad:df:45:99:9b:0a:39:de:59:5e:ce:10:7b:b0:3c:de:a0:87:
         df:c7:67:87:a9:7c:6c:69:87:b2:81:48:2c:fd:59:ea:f6:32:
         40:6d:af:89:34:01:d4:58:ae:86:6f:33:11:23:91:be:94:28:
         85:da:1a:7b:0b:bd:70:d7:15:07:21:9d:97:0b:a4:b3:0c:cc:
         1f:f3:2d:c5:e7:22:f7:0f:61:ec:e4:63:fa:7f:76:47:b5:6f:
         96:44:85:b1:a1:1d:57:95:95:1e:84:97:cb:dd:a4:81:12:a9:
         45:78:e2:e7:70:ce:4b:69:50:7a:33:d7:b4:4d:60:59:c0:78:
         f2:cc:8d:e7:4f:53:88:e3:96:aa:d2:26:3c:2c:65:15:9f:53:
         ae:2f:c4:97:50:f2:56:f9:6d:ae:59:d0:9e:53:cb:a9:eb:96:
         3c:ca:3a:dc:5a:15:7a:3f:aa:b7:ed:9c:6a:f1:c7:0a:52:71:
         e2:26:57:35:03:2d:d3:3c:1b:1f:b2:2a:f6:f3:c6:5f:f2:8c:
         5a:7f:86:4f:00:61:3e:18:1c:85:4b:cd:a9:75:06:9f:6e:14:
         1f:e9:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:45 2026 by rpki-client