Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b0f13f-a4a6-3c74-b97f-ce7003bf6063.roa
File:                     f8b0f13f-a4a6-3c74-b97f-ce7003bf6063.roa (raw, json)
Hash identifier:          b2Ipb7HXKPTEJ/ENlVj2rMlB+r8qybCcTEd5nAgrgMc=
Subject key identifier:   AC:D4:19:BD:9A:B1:0C:17:CE:C4:C3:CB:34:18:DC:92:DD:DB:A8:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956B17DF6FB2EF31F27880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b0f13f-a4a6-3c74-b97f-ce7003bf6063.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396605
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:6b:17:df:6f:b2:ef:31:f2:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=bc13473a-a2d9-4627-8161-ea4d498ccc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:20:e7:c7:2d:73:65:3a:f1:0f:17:83:17:
                    cc:45:ac:b6:19:05:c2:96:77:e1:8e:94:4c:91:e9:
                    be:20:ce:4e:0f:d2:2c:ae:8f:ed:3f:63:81:93:89:
                    55:36:dc:00:2a:e5:0f:16:d4:a7:49:47:a3:bd:33:
                    5a:4c:52:9d:93:37:5c:10:7f:cf:4e:63:0c:0d:8a:
                    90:04:60:4b:ab:6a:e7:24:82:a8:e0:69:36:a4:86:
                    38:c9:4a:dc:71:d3:ad:f1:a3:4b:4f:82:c6:38:89:
                    2b:21:1d:c9:1d:20:5e:c4:6b:e1:06:8f:00:13:86:
                    f1:f7:20:66:0a:1e:43:d2:23:c7:14:a1:32:61:28:
                    be:70:2e:c5:aa:ce:f0:b4:79:5e:a8:65:d6:7d:6c:
                    4f:d5:dc:29:61:24:02:d6:8a:95:77:78:f9:27:13:
                    5a:49:b3:e5:08:ff:34:81:14:aa:de:f2:7f:60:33:
                    05:b4:db:dc:3d:6a:41:86:18:aa:ed:cc:47:f8:85:
                    35:39:5a:1c:c7:bc:da:be:a3:e3:57:74:22:db:81:
                    2e:d6:b5:92:1b:6e:13:49:ac:35:51:68:53:93:45:
                    ee:cc:3b:2d:d0:12:af:69:f3:35:45:4b:56:73:c4:
                    c2:81:79:5c:5e:14:45:32:7a:9d:0c:81:af:bb:04:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:19:BD:9A:B1:0C:17:CE:C4:C3:CB:34:18:DC:92:DD:DB:A8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b0f13f-a4a6-3c74-b97f-ce7003bf6063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8a:52:54:38:d5:e4:0f:fa:44:f0:7c:a4:16:f6:77:be:be:
         55:28:f3:74:93:e6:46:c0:75:74:c4:57:51:a8:ad:3c:50:d6:
         94:ea:6a:ed:7d:52:66:56:3e:39:86:20:30:2c:38:a5:f5:20:
         ce:05:af:31:ad:f4:ef:ac:ba:d9:f7:c5:6d:89:bc:16:48:e0:
         5a:a5:4a:40:2a:bb:a8:b1:40:37:a6:2c:8a:1c:8d:a6:c5:98:
         7d:3f:dd:31:4e:89:de:79:66:53:c7:34:58:82:a7:d9:8a:a4:
         85:0b:ad:9c:5d:a5:90:29:a1:31:97:26:ce:ae:fe:62:8f:cd:
         2e:03:38:46:0d:87:22:42:6b:b0:f6:a3:40:b1:10:ea:95:1a:
         ee:e6:85:8f:23:3d:74:9c:e9:78:fd:bd:0e:74:66:89:37:ef:
         03:c9:55:10:e2:b7:21:c5:41:22:2a:41:2e:d1:25:b4:1d:30:
         ce:bb:c1:82:07:1c:1b:1c:5d:ab:69:ba:34:3a:f4:4e:40:31:
         ad:7f:8a:07:0e:0d:09:97:04:cf:52:f1:8f:8b:e0:fa:8f:19:
         f9:8f:b9:b4:b2:44:88:fa:79:c2:5b:e9:d9:19:a5:b5:3c:dc:
         88:a2:c0:2c:0c:14:3f:9d:a8:6b:29:29:16:a8:e9:c9:79:55:
         9d:16:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:04 2026 by rpki-client