Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75cd615-ff03-3c19-bf9f-8d81f3bfcd0b.roa
File:                     f75cd615-ff03-3c19-bf9f-8d81f3bfcd0b.roa (raw, json)
Hash identifier:          38Gzjma1ATdipXcbYg5lRqqu0iQvq3VbRHgssDRJfRs=
Subject key identifier:   BB:24:DF:A2:7A:D8:DB:32:68:3D:96:58:37:B9:AC:0E:54:FE:E4:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD2A6694679F986F370A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75cd615-ff03-3c19-bf9f-8d81f3bfcd0b.roa
Signing time:             Thu 09 Apr 2026 14:07:50 +0000
ROA not before:           Thu 09 Apr 2026 14:07:50 +0000
ROA not after:            Wed 08 Jul 2026 14:07:50 +0000
asID:                     396564
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d2:a6:69:46:79:f9:86:f3:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:50 2026 GMT
            Not After : Jul  8 14:07:50 2026 GMT
        Subject: CN=cd063ce2-eae3-4b11-8f10-cdc024f474ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:da:8c:0b:1b:e6:09:31:76:97:18:75:40:
                    75:f8:7b:f4:21:09:39:4e:af:c3:5a:6a:ea:ff:cc:
                    65:c6:c8:02:85:e7:25:1b:a1:5c:95:84:98:ac:c3:
                    c6:b3:fb:44:dc:79:86:30:33:f1:54:5e:53:5f:29:
                    f7:a6:17:45:b5:59:57:3c:4b:c5:92:c2:30:e6:2a:
                    3d:af:67:3f:be:7f:6e:d3:59:1a:fb:ba:f1:de:ef:
                    2f:3e:0b:1f:15:b8:d8:68:27:6e:26:59:9f:70:e4:
                    c2:11:0a:34:75:f0:6d:ca:d3:d4:e6:d8:73:9c:e4:
                    f3:e2:0d:05:15:e4:9f:f9:ec:30:d4:88:11:d0:22:
                    0f:4d:30:70:16:6a:c8:52:17:20:7e:b4:25:02:eb:
                    49:01:df:42:c6:73:d9:0e:84:5a:7f:5d:cd:71:22:
                    34:35:fe:a5:ea:4e:58:3c:8c:77:14:58:2b:bc:e9:
                    ee:2c:ae:59:78:84:a0:68:39:c0:69:fb:99:d6:cf:
                    39:0b:90:f8:af:a1:b4:d1:c7:98:b6:d6:a8:80:6e:
                    21:17:04:39:39:4e:9c:ce:6b:60:ff:e6:39:96:e1:
                    5f:47:8b:11:10:40:7e:f5:fa:84:8d:b1:08:5f:1b:
                    29:be:bc:8a:9a:6b:86:bf:a0:51:b5:9b:2b:84:7a:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:DF:A2:7A:D8:DB:32:68:3D:96:58:37:B9:AC:0E:54:FE:E4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f75cd615-ff03-3c19-bf9f-8d81f3bfcd0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:6e:d2:27:c3:4e:8e:4a:1e:89:a2:c2:e8:7b:50:c0:06:
         13:59:12:e7:69:56:6f:8d:73:a4:33:2c:50:db:41:1c:78:80:
         40:3c:5d:b0:a6:f8:85:bb:91:a5:73:6c:cb:a7:ce:b1:1b:81:
         9d:5f:94:50:0e:36:e3:d4:42:7f:f4:0e:41:4a:a7:da:b6:fb:
         ef:40:0c:85:11:ce:fe:f7:dc:cc:20:a9:32:38:7b:8e:a9:48:
         91:95:ce:8f:99:5a:f7:fd:41:b7:3b:59:03:dd:85:2d:d8:d5:
         2e:be:f3:af:87:55:16:54:bb:ec:3c:a6:fa:a2:e0:b3:57:26:
         79:ce:7a:84:a8:a8:45:2d:76:97:34:03:96:24:db:bf:7c:49:
         6e:03:7a:8e:28:d3:a6:15:31:07:3a:1c:30:1d:70:b2:65:2b:
         8e:21:19:c3:fe:f7:e6:ca:77:25:98:71:c6:63:17:2e:e9:f3:
         a4:ab:78:f1:ae:7e:d4:01:63:c1:26:f6:4a:b5:d0:7e:63:32:
         a7:bd:df:9e:b6:fb:fd:6f:3b:0f:30:f7:39:22:52:30:39:e4:
         ce:94:44:55:c3:8a:92:3b:aa:3a:97:19:ea:c7:89:7e:75:4a:
         0a:68:e1:71:8c:4d:ef:3c:21:a1:63:ba:99:ca:9a:26:63:09:
         8c:20:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:29 2026 by rpki-client