Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffed1249-131e-39cb-ab74-387c326a1b78.roa
File:                     ffed1249-131e-39cb-ab74-387c326a1b78.roa (raw, json)
Hash identifier:          ACn5zmJFsXVbVjpB7m/7F6C573VtQxvveQZcHQpTPSc=
Subject key identifier:   0E:75:48:95:65:41:5A:E2:26:F0:A9:2C:CE:BC:AE:43:99:11:AF:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81286F518709E9A541C12A20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffed1249-131e-39cb-ab74-387c326a1b78.roa
Signing time:             Tue 14 Apr 2026 14:22:19 +0000
ROA not before:           Tue 14 Apr 2026 14:22:19 +0000
ROA not after:            Mon 13 Jul 2026 14:22:19 +0000
asID:                     396597
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:6f:51:87:09:e9:a5:41:c1:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:19 2026 GMT
            Not After : Jul 13 14:22:19 2026 GMT
        Subject: CN=7ce8c998-7402-41f6-9136-e7b1d82f699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:ad:b8:56:83:a3:5e:be:18:a5:3f:80:11:
                    e6:9c:19:86:67:5a:4d:3d:a2:d2:27:75:6e:41:31:
                    a3:54:8f:12:48:e8:6b:5b:7f:06:1f:db:f7:8d:20:
                    d4:2b:80:db:bf:8e:cb:f8:82:b5:27:71:74:26:19:
                    59:b7:43:b8:fd:21:bf:3b:44:a3:ed:2b:25:98:2d:
                    fb:f0:8f:b4:41:6f:1b:0e:e3:23:bd:00:1d:ab:9a:
                    ec:4c:1d:3b:e7:97:4e:b7:a6:db:32:90:c2:1c:c8:
                    a4:f1:58:a8:98:e0:56:9c:88:93:37:cc:55:ba:1e:
                    c4:a2:e7:10:c7:d0:49:c2:19:e8:ab:2f:d7:f0:4b:
                    e7:37:9b:e2:4c:1c:68:d6:63:63:fc:3e:b7:34:60:
                    90:ac:ee:e4:57:fd:90:ad:50:4d:cc:9e:d1:d8:83:
                    52:b7:93:f1:5f:77:24:db:70:63:8b:95:5c:86:0b:
                    39:57:03:18:31:89:b8:8a:9d:8b:ae:de:4c:07:53:
                    3f:83:42:0e:e3:03:83:d9:8e:e1:f6:f8:bb:62:96:
                    ae:09:da:bd:40:f2:89:a9:e5:10:10:e2:53:44:aa:
                    50:3d:dd:89:0a:32:90:58:e8:e4:ce:3d:13:76:49:
                    14:e8:df:0a:21:4e:b8:20:cb:85:86:81:ec:4b:fb:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:48:95:65:41:5A:E2:26:F0:A9:2C:CE:BC:AE:43:99:11:AF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffed1249-131e-39cb-ab74-387c326a1b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e9:50:65:9b:22:0f:57:1f:53:b7:e6:85:8b:d5:90:4b:a7:
         b8:ac:c1:e6:57:4a:34:b2:ea:ad:f8:f3:00:3a:83:91:c0:16:
         22:bf:ed:48:11:65:d9:bf:a3:51:69:6d:54:a2:bb:f5:1f:ab:
         3f:96:31:a8:81:2f:99:2a:29:70:85:e9:ad:42:34:b6:05:9d:
         87:cd:8e:49:52:0f:e8:5b:23:46:cf:9a:11:3c:de:40:25:83:
         b6:f3:7f:06:4c:dd:49:90:4d:ef:fb:bf:1f:cd:d9:56:2d:9b:
         d8:d7:98:52:78:f7:12:6c:c3:7a:57:be:44:c6:99:9a:54:a4:
         f3:45:86:fe:36:d8:d3:3f:cc:8a:17:4c:1f:87:d7:41:bd:3e:
         0c:4f:35:24:c7:8a:1a:2c:fb:d8:1f:55:36:fa:95:73:7f:28:
         fe:e9:cc:91:5f:03:80:6c:75:33:ef:35:e9:3a:aa:24:4d:2b:
         d9:01:30:73:4b:f3:6f:52:fe:1c:b9:4b:0d:89:cb:63:ce:dc:
         7a:54:71:4d:40:33:58:63:50:a0:45:78:af:14:97:01:62:49:
         6d:df:81:88:a3:6f:9e:69:ed:d4:92:d4:7a:aa:7b:17:bc:a3:
         57:f4:f6:f3:71:f6:3e:1f:a6:50:af:18:f1:7d:26:46:73:fd:
         0f:07:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:15 2026 by rpki-client