Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa
File:                     0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa (raw, json)
Hash identifier:          ehlcRE9kUI6GPKgh9smo405VwHROcdQItz33/zFC4gU=
Subject key identifier:   75:BA:6F:4F:38:8D:FE:6B:77:5B:70:A0:D9:AE:41:8E:E7:23:E9:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B175CD3510BBECF3EBD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     36617
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:17:5c:d3:51:0b:be:cf:3e:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=901a7771-6ee0-4280-b451-831afc7cdde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:b0:3f:72:35:07:b7:41:ec:ce:9a:ca:ae:
                    0a:15:45:47:45:e5:a7:31:a6:36:7e:9e:9b:9a:1f:
                    40:13:78:09:72:78:3a:cd:ae:d8:12:7b:3f:46:76:
                    02:f2:0a:3a:c1:d3:fe:2e:96:f4:55:e6:3e:20:d1:
                    93:9f:2f:7c:b9:f5:4c:17:64:08:5a:a0:9f:9a:43:
                    77:fa:4e:cb:49:49:61:09:13:6e:88:a5:81:3a:0b:
                    1f:bb:56:43:2d:71:e3:6e:d9:5a:46:ba:3e:8f:1a:
                    ca:09:a0:2f:bb:87:66:84:b9:7f:51:b2:d9:e2:d3:
                    0c:13:33:18:64:fe:70:c4:57:93:40:a3:f4:b4:a2:
                    ac:f2:04:e1:4e:5b:86:f3:18:03:de:58:88:82:fa:
                    05:4a:0a:c9:b4:a9:de:85:1c:84:2c:af:f9:59:4a:
                    e8:5d:4b:13:78:cb:0a:1c:b8:99:fb:14:d4:8b:e4:
                    d2:6d:1a:6d:fb:b8:48:ed:bd:b9:fe:61:1c:e7:84:
                    8d:a7:1d:0e:ea:3a:b3:92:aa:d4:54:ab:c2:d6:4b:
                    29:8b:a2:2f:27:9c:c2:29:e1:2a:a5:49:ae:64:bf:
                    69:41:8a:11:31:c8:b4:f1:df:51:fa:fe:27:c5:cd:
                    7d:e5:1b:9d:e5:80:29:e5:66:bd:13:13:df:04:d4:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:6F:4F:38:8D:FE:6B:77:5B:70:A0:D9:AE:41:8E:E7:23:E9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:58:f2:fd:12:61:45:8e:3c:39:f9:57:b6:f5:cd:e1:17:9d:
         e2:c8:38:cb:c9:09:54:f6:d7:7d:17:41:cb:7d:ae:fb:83:cd:
         59:6a:1d:98:db:f7:1c:55:c2:eb:74:05:74:c8:9b:c0:64:4d:
         a8:8a:82:34:c5:ce:ce:57:2a:d2:6e:a0:cc:37:7d:90:c2:62:
         79:8d:81:90:fb:29:01:71:e0:ac:dc:dc:6f:60:9e:fd:b1:c4:
         ba:8e:c8:68:1e:84:8d:97:43:03:ae:2e:ad:af:5b:a8:c1:28:
         75:08:53:50:19:3e:25:fc:59:1a:ea:fe:d2:58:72:4f:9e:0a:
         e5:08:18:85:90:5d:5b:c4:3e:f3:7e:16:b6:a5:17:aa:9c:d3:
         67:16:c3:c3:05:b3:d0:76:98:d4:1d:c1:13:7c:17:ea:7b:ef:
         a1:3d:ba:c8:c8:b0:a4:84:0d:51:8f:b4:6d:ba:0b:49:cd:1f:
         31:3f:1f:48:95:14:d6:b9:7b:a8:f5:fe:3c:ad:fd:c4:2c:e0:
         8a:11:e1:a0:04:49:36:02:73:5d:56:2f:5d:95:23:04:92:e0:
         67:3f:9e:a1:5b:ee:b2:11:d5:dc:b3:cc:37:ae:4e:18:4f:6f:
         9a:eb:87:3b:14:b4:6e:fe:35:98:42:ad:6e:90:51:e3:fb:69:
         f6:1b:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:23 2026 by rpki-client