Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dbb40-597b-3ac6-8e65-5ba178b5083e.roa
File:                     f23dbb40-597b-3ac6-8e65-5ba178b5083e.roa (raw, json)
Hash identifier:          1nnhhOorJKv+9oj6cnIIxZyZ+E5oDyr7Eg6cAwm5MAI=
Subject key identifier:   B8:CC:15:38:2C:47:2D:CF:F5:09:79:5D:C6:B0:F0:43:2B:67:10:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEB5AFD82D54DD52EC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dbb40-597b-3ac6-8e65-5ba178b5083e.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396565
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:eb:5a:fd:82:d5:4d:d5:2e:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=da5ca788-fa51-4c5c-b178-59f9125968e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7e:ad:a4:72:68:91:7f:22:ec:ad:e3:80:93:
                    86:6d:69:27:f8:5a:71:65:9f:5f:25:4f:b2:fa:83:
                    e8:07:e5:67:35:9d:a6:5a:82:f2:0b:13:fa:66:8c:
                    c6:06:c8:50:da:9d:0c:ba:55:17:e3:09:32:86:7d:
                    3b:6f:80:61:ff:e2:68:29:81:86:27:55:9d:be:47:
                    56:4d:7d:3b:63:81:a2:21:e3:50:23:42:36:f9:4f:
                    30:b9:a1:f2:e1:c4:f6:71:bb:83:b8:6a:74:c6:b9:
                    15:09:d9:c2:84:ac:91:b6:20:b6:ab:9b:7c:1e:ea:
                    d4:0b:88:97:41:e5:09:1e:af:0c:cf:45:99:55:a7:
                    ff:16:7d:66:f2:51:64:25:57:88:6a:fc:e5:90:97:
                    86:50:4e:e8:83:a2:6f:d4:10:a3:d8:9c:0d:03:9d:
                    3a:eb:1c:89:8f:eb:7e:f4:85:63:75:84:9b:cb:cc:
                    4f:51:38:c2:11:a7:d1:02:1d:0b:c9:99:52:e8:b8:
                    50:51:8c:f3:5d:32:e9:c4:f8:9b:e4:46:22:36:79:
                    e0:49:f9:13:82:82:ad:7e:be:85:6d:13:e1:ed:8e:
                    7a:46:0a:30:82:0c:e5:de:4e:9a:da:13:20:2f:eb:
                    ed:75:94:d1:36:4b:a0:a6:0e:4a:62:0d:ed:85:90:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CC:15:38:2C:47:2D:CF:F5:09:79:5D:C6:B0:F0:43:2B:67:10:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dbb40-597b-3ac6-8e65-5ba178b5083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:04:71:c3:5d:29:6a:ed:32:19:66:56:26:ce:fe:00:ea:2b:
         89:7f:cf:d1:22:ec:d7:2e:f6:cc:2b:9f:c5:be:8b:f4:42:2f:
         9c:b3:20:a5:1d:61:dc:2d:8c:e6:2a:a1:d8:3a:55:e0:ab:85:
         e6:2b:04:66:9f:ef:c5:7d:70:ec:54:ef:9e:21:fc:01:a9:6f:
         83:b9:e8:76:c5:6a:17:a9:8d:f5:a2:e8:0e:e7:84:40:f1:6d:
         37:d4:2a:88:3d:41:cf:40:97:05:13:cc:65:2a:b1:f6:43:86:
         73:ed:87:44:5c:b2:69:5c:b3:06:0c:1f:b8:d0:c7:60:5d:f3:
         be:9a:86:be:0d:b9:a2:0c:57:7a:07:87:6d:2e:92:62:51:da:
         6d:43:42:54:3d:a9:d1:d5:4d:be:fd:72:24:8c:cc:ff:1a:9a:
         0a:7c:be:50:d6:98:5f:df:56:5d:48:03:76:de:71:1a:62:43:
         f5:b1:d2:77:8d:b2:bf:f8:f2:df:6b:e4:48:99:cf:b2:be:3b:
         23:bb:11:75:57:c5:51:25:eb:d8:30:14:60:9f:5d:56:58:fb:
         fa:eb:aa:54:42:fd:b7:a8:e9:b7:41:41:52:96:8a:08:2d:0b:
         38:91:c4:65:49:54:95:9f:35:ee:18:8b:c5:41:53:03:f0:5c:
         cd:54:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:33 2026 by rpki-client