Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7e42fc8-09be-3623-81ac-25ff833f3f98.roa
File:                     f7e42fc8-09be-3623-81ac-25ff833f3f98.roa (raw, json)
Hash identifier:          HcUjOUYRbPgnej6pifoUySlZIsstcktbOkX5moB/o74=
Subject key identifier:   1A:9F:B8:EB:2D:3D:F9:19:11:2A:7E:00:7A:FD:DC:FE:C0:43:C0:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81287467B34946B5441D2C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7e42fc8-09be-3623-81ac-25ff833f3f98.roa
Signing time:             Tue 14 Apr 2026 14:22:22 +0000
ROA not before:           Tue 14 Apr 2026 14:22:22 +0000
ROA not after:            Mon 13 Jul 2026 14:22:22 +0000
asID:                     396608
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:74:67:b3:49:46:b5:44:1d:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:22 2026 GMT
            Not After : Jul 13 14:22:22 2026 GMT
        Subject: CN=0d002aba-202f-4a02-b8d8-80cf677f3742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:1c:13:37:88:fb:ec:1b:ef:9b:eb:b9:32:
                    f7:7e:b6:ff:5a:59:95:2e:06:fb:c8:0c:5d:32:1a:
                    1c:0d:dc:32:97:2d:46:d2:6c:10:28:09:c1:e2:6d:
                    ba:80:01:60:ad:e6:67:24:85:c5:98:9f:aa:67:e0:
                    50:c2:a3:e7:81:d7:02:76:32:d3:66:08:e4:03:ee:
                    04:e5:ae:44:84:5b:07:16:98:61:f4:a8:2a:ce:b0:
                    eb:06:53:06:b9:78:33:97:e2:52:80:b7:31:27:df:
                    7a:21:69:2c:42:cd:83:e2:ea:07:0b:36:de:22:ef:
                    b6:78:02:90:fe:5b:db:b8:ef:03:5b:f0:d7:41:12:
                    15:c7:8b:78:8a:aa:3a:77:1f:91:a6:7c:a6:5d:04:
                    08:c3:a0:cb:4e:1b:c0:fa:80:cc:ce:ff:4f:f5:8d:
                    77:4f:17:fb:91:0d:34:02:71:3d:3d:90:b7:5b:2f:
                    56:c2:72:9f:2a:1c:60:5a:37:fd:86:be:f3:8a:2c:
                    74:8d:01:ac:f9:bf:9f:fd:51:bd:ec:f3:e5:66:e0:
                    f7:22:85:2d:fc:8c:44:81:51:02:04:f4:f4:d9:8f:
                    14:e1:d8:8d:15:89:76:2f:60:b9:9f:95:25:9c:6b:
                    04:45:12:3b:9c:80:1f:38:82:e6:bf:d3:f7:8e:93:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:B8:EB:2D:3D:F9:19:11:2A:7E:00:7A:FD:DC:FE:C0:43:C0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7e42fc8-09be-3623-81ac-25ff833f3f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:78:94:52:52:bc:df:1f:63:66:d8:55:c9:4c:83:0d:8b:
         d2:41:7e:e6:ff:8d:15:e1:d5:46:29:49:e1:36:6f:9f:dc:35:
         d0:19:e6:55:76:ed:4b:8a:1d:cb:b6:46:ef:e4:26:dc:fc:64:
         b4:2f:03:47:5b:b8:15:32:f3:4f:4f:91:c8:7c:68:69:e7:31:
         37:4f:a7:e7:9b:b6:75:a3:eb:77:05:57:fc:f3:7f:aa:0c:6d:
         52:f3:be:d7:87:32:9d:54:34:85:0b:d5:98:c2:10:e1:0e:71:
         ea:21:48:ba:0b:48:95:c7:5e:12:86:36:9f:7f:f2:ca:41:7f:
         ca:e4:6d:31:d3:51:f9:79:fe:dc:93:11:f4:62:92:1d:22:73:
         b2:de:cf:c3:7e:62:f8:3c:7e:92:44:74:84:5d:26:85:2a:96:
         62:39:03:9d:5a:d2:a6:1c:4c:73:b0:5b:06:ee:6a:db:e0:39:
         cc:37:3f:da:91:60:95:68:1f:83:f6:8d:8f:75:68:99:d7:24:
         de:19:44:ce:99:9e:0d:24:2a:2a:75:c6:d1:c4:88:97:8a:66:
         f0:f8:9f:77:3e:55:ff:25:e1:a9:88:08:c7:08:ff:8d:68:03:
         e4:b8:7e:fa:58:c4:13:da:a2:84:6d:d7:2f:91:3d:81:c6:2f:
         f2:bc:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:41 2026 by rpki-client