Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa
File:                     06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa (raw, json)
Hash identifier:          kMUSAh7jPZewuKftAooEDFrU2ta5fi/LPEt/zEpeKo0=
Subject key identifier:   B4:8C:F7:2A:F2:FB:BB:1F:FD:76:D1:D8:61:7A:74:9A:FA:9E:27:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8C2AA836C1458F39B7FB8500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     396600
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:a8:36:c1:45:8f:39:b7:fb:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=e5e7181d-91d9-4bdc-8fda-56849cb520b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:c3:d0:ea:77:c6:14:5c:e1:bd:c3:91:bd:
                    c3:61:90:4a:e6:6c:b9:58:ab:91:e0:8f:9d:b0:b1:
                    d8:66:8f:ec:33:08:09:95:d5:34:bf:59:11:2a:39:
                    95:f3:90:62:73:f6:1d:d8:76:00:d0:87:62:80:7f:
                    5a:cb:d9:6d:54:44:3b:74:ad:d4:ef:ee:d5:da:bb:
                    07:4e:f3:4b:91:01:ff:35:6c:5b:69:2d:1b:68:5a:
                    64:72:c0:46:46:12:45:c4:de:a0:b6:13:97:19:3d:
                    9d:3c:d4:3b:a0:ee:7b:3e:24:27:ae:8c:08:f2:0e:
                    08:0d:3b:28:9c:96:e1:1d:bf:4e:3c:0f:a5:1b:e7:
                    70:72:02:a3:29:48:d1:dd:c1:1b:29:bf:2e:80:14:
                    73:88:d5:19:56:ce:0a:e8:fd:26:c9:5c:68:f6:17:
                    03:ee:56:af:60:cf:5f:a1:8d:a5:59:19:f7:94:9d:
                    e9:c6:0b:fe:81:00:17:c7:48:01:97:b7:18:31:f4:
                    3d:e4:70:87:ff:63:f1:f4:84:e3:7a:d0:9c:19:a4:
                    ce:ab:9f:a3:82:63:49:68:f3:68:5d:cd:24:c8:5c:
                    ba:2e:32:a1:23:02:8d:f1:16:42:52:78:08:61:18:
                    4c:0e:fd:70:80:5f:44:5b:e3:79:b5:83:a7:ba:84:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:F7:2A:F2:FB:BB:1F:FD:76:D1:D8:61:7A:74:9A:FA:9E:27:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:88:fa:44:0b:1f:54:18:89:a0:76:8b:a3:20:64:7c:cb:
         da:ab:70:fb:0a:5d:2b:92:7f:12:17:06:a9:96:e3:1a:64:06:
         6f:41:af:a2:05:27:7a:d9:37:14:bd:8e:28:9c:8b:e6:24:5a:
         39:64:51:cd:be:44:33:dd:4a:c4:3c:48:79:1b:a3:e5:74:47:
         c4:77:35:91:78:c8:8e:b0:1c:96:be:45:e6:5b:64:3c:2d:6a:
         a5:42:5f:b5:13:36:05:a3:f7:f2:31:20:65:e7:eb:e2:37:81:
         2d:50:f6:a1:5d:c1:0a:a0:0a:e4:b8:d4:91:bc:fa:7b:a4:53:
         01:cd:84:16:98:c4:61:6a:69:cf:48:19:7f:2e:90:09:bd:5a:
         13:aa:6b:1f:26:c4:ee:be:d4:49:f9:b4:d2:bf:e2:8c:77:27:
         16:8e:21:9a:cc:13:aa:5e:ff:ac:90:fa:de:49:d8:fa:e8:9b:
         30:a7:87:1e:1b:77:31:c6:e9:8d:db:39:8a:4e:2a:69:91:bd:
         88:a2:ba:91:11:0c:b3:fd:4c:e4:7d:9d:f0:af:60:eb:a7:1e:
         a0:a8:bf:70:5d:a7:b1:7f:02:ae:fa:04:1c:d2:ba:90:6d:c6:
         b0:d0:74:f6:18:f5:8c:dc:f6:9c:94:12:78:5b:83:52:f8:f5:
         a4:db:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:28 2026 by rpki-client