Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
File:                     152ea318-14d3-3b70-9370-be6873222de0.roa (raw, json)
Hash identifier:          zPtKDWrWlrMYrMaxI2l3915MFTxsTd2ORpp3SQw5HM0=
Subject key identifier:   58:71:3F:86:27:29:24:E0:A2:52:36:E5:9B:55:DF:F5:3E:F4:94:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D93255912D713A3C9098C6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     396551
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:59:12:d7:13:a3:c9:09:8c:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=f38d4409-0d4d-48da-af08-e8a5e97dc8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:e0:db:3e:51:a1:a0:af:aa:60:30:1f:26:
                    b2:ea:88:ef:6e:4c:a4:fa:35:c3:32:d7:1d:bf:12:
                    7e:5b:d8:4f:b9:58:8d:ae:e8:78:12:c6:3b:5f:dd:
                    fa:0e:6d:a0:c4:ec:cc:0b:9a:17:9f:2a:d5:0f:47:
                    40:f6:90:7d:9a:11:c0:70:4d:7a:fe:f3:2c:9c:bb:
                    a6:1e:00:9b:23:49:28:2a:d4:04:22:5e:7d:14:4b:
                    8b:db:88:a3:08:36:9d:4a:e5:62:6e:42:bc:6e:7e:
                    a1:dc:85:51:20:7c:fb:7f:23:24:c0:72:e8:3d:74:
                    7e:2f:fe:4b:9a:7d:e7:f9:5d:39:56:46:56:32:25:
                    a4:de:7e:c1:b8:5a:14:d4:ff:92:89:b1:31:8e:06:
                    ac:72:8a:d5:86:cc:9a:a1:ad:e1:a9:24:69:b8:cf:
                    07:6b:74:28:03:fd:65:f0:ee:c9:5f:03:da:67:98:
                    14:f4:ab:9c:55:cb:81:97:51:b8:b0:9d:03:72:b8:
                    0c:ac:68:e9:54:b9:5c:91:d6:50:d1:38:76:4f:fd:
                    35:cb:35:87:24:60:d9:61:e1:4e:92:bb:25:e7:2e:
                    fc:c8:2a:32:b4:d3:b6:68:14:df:23:d0:93:07:82:
                    31:d6:c0:c0:1c:72:7b:5d:40:c9:39:d4:d3:99:26:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:3F:86:27:29:24:E0:A2:52:36:E5:9B:55:DF:F5:3E:F4:94:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:e1:be:54:e2:f0:1c:3a:df:4b:14:79:6d:11:ba:cf:d0:
         dd:ab:62:1c:5d:da:7d:f2:97:94:c6:d9:f2:87:5b:78:88:7e:
         09:e8:d3:91:23:ba:62:cf:15:5c:6a:d5:18:8d:9c:b8:2f:eb:
         1d:84:97:a7:d7:07:cf:33:9b:df:a8:62:b6:65:4c:1e:1d:82:
         e4:e2:7a:80:81:7b:b3:91:8c:0d:ca:d6:5e:75:eb:9b:af:d5:
         98:fe:e3:8d:f4:40:92:00:95:bd:7b:bf:1a:c5:ea:e7:af:d6:
         a6:14:a1:4e:f3:74:c1:4b:2b:33:a2:af:c1:33:30:f1:b4:36:
         bb:36:eb:e8:43:a8:58:52:c5:0c:4b:75:33:9f:77:31:00:84:
         c5:b9:91:b7:b0:8f:ed:14:ce:7e:9a:30:ea:cb:77:b9:50:79:
         3d:9b:b4:d8:81:68:a0:d3:1f:c7:4c:ba:b5:12:e7:7f:9b:d2:
         96:08:77:b4:94:30:5d:e0:c9:f5:5f:1d:96:b8:74:d2:9b:f5:
         8a:d9:3f:e1:63:7e:e3:a6:1f:4f:8c:4b:24:b3:2b:0a:d9:f9:
         63:de:d4:a9:3f:7c:77:a8:42:92:ed:70:be:2e:0e:84:ae:0f:
         f8:65:8b:69:0c:59:54:7a:f7:7a:1f:35:a4:7b:55:9d:c5:2f:
         98:16:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:29 2026 by rpki-client