Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15e0113d-74f2-308d-a02a-be87f727a09a.roa
File:                     15e0113d-74f2-308d-a02a-be87f727a09a.roa (raw, json)
Hash identifier:          zNnDSCqhTdpI4czs/uPVhGKkHTH9foBofOVavjH5en0=
Subject key identifier:   CC:2D:F4:FF:D1:CD:00:11:1A:AA:BA:4C:92:22:F4:C6:EF:8F:DB:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D3CE532C18532D19FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15e0113d-74f2-308d-a02a-be87f727a09a.roa
Signing time:             Thu 14 May 2026 14:07:58 +0000
ROA not before:           Thu 14 May 2026 14:07:58 +0000
ROA not after:            Wed 12 Aug 2026 14:07:58 +0000
asID:                     396574
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d3:ce:53:2c:18:53:2d:19:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:58 2026 GMT
            Not After : Aug 12 14:07:58 2026 GMT
        Subject: CN=11ce4ac0-6e13-4010-8387-39a33656d6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:08:58:67:b0:5d:7c:57:ff:85:d3:52:3e:
                    83:36:e2:7e:4a:d9:4b:06:30:6f:0b:7c:b9:1a:5e:
                    85:3d:db:f2:5a:99:d4:d3:16:db:1b:04:a1:3a:17:
                    ec:f5:4e:9f:66:70:05:fb:e3:ff:0a:37:42:8f:58:
                    70:06:03:47:e5:c1:bd:bc:a7:07:11:d4:07:96:46:
                    0c:8c:ad:64:20:39:49:c0:c7:24:8d:c4:94:8b:c4:
                    f5:e3:a6:8f:fa:8e:3c:a7:16:99:87:83:01:b1:01:
                    ee:7c:8b:22:67:68:cc:73:20:5e:52:60:04:69:a8:
                    10:53:b5:48:09:c2:cf:3d:8e:2c:a5:1a:d4:f9:6a:
                    8a:11:9d:64:73:ab:55:a9:9d:7a:b4:8d:70:1c:db:
                    a5:88:fe:6c:c3:a6:34:a9:6a:ca:fc:e7:53:ab:39:
                    ee:3e:46:9b:c7:15:65:8b:bd:cd:8c:d3:48:57:2e:
                    91:02:86:2c:3c:4f:ec:b7:60:82:7d:71:ba:7a:47:
                    ec:89:12:b0:f9:9e:5b:eb:7e:46:68:40:d7:83:53:
                    8f:13:a7:93:a5:cd:0d:cd:70:79:1a:77:11:6b:b6:
                    ec:c5:65:89:19:85:b6:27:da:49:5e:52:cb:81:04:
                    d9:17:f1:f6:e1:6c:1f:89:76:1d:14:cc:8c:9c:de:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:F4:FF:D1:CD:00:11:1A:AA:BA:4C:92:22:F4:C6:EF:8F:DB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15e0113d-74f2-308d-a02a-be87f727a09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c9:30:97:94:91:76:d9:01:6c:9c:f6:e3:e8:e7:f5:e2:63:
         11:76:44:b3:1c:9f:10:6e:69:63:9d:da:f8:f9:ec:d0:ad:7a:
         37:82:e8:a4:01:43:47:c8:27:af:09:34:2b:34:6c:13:cf:c7:
         93:8b:18:c1:50:bf:46:a4:52:79:06:1e:ef:76:95:e6:e2:a0:
         b2:f8:aa:24:65:4b:46:32:06:9b:e6:d0:b9:b9:17:8d:bf:ea:
         52:95:2f:63:fb:d3:53:eb:38:6d:4c:00:27:36:27:c0:aa:1c:
         11:8a:88:a7:6f:1e:66:17:5f:6e:45:d5:69:f4:55:06:97:95:
         40:d1:b4:fc:56:ab:7e:a7:82:a1:71:8b:17:22:63:08:6e:2b:
         8f:84:77:24:53:e7:e5:2b:07:34:dd:1a:da:14:cf:6f:d7:be:
         c0:a1:4c:62:ad:3a:ff:2f:60:6b:d6:55:ea:24:48:41:8e:6c:
         ab:ba:7d:e6:bd:6b:c1:ee:b8:df:3d:d5:83:67:59:a0:2b:dd:
         b0:ff:a3:82:a1:f6:c8:68:6e:b8:fb:b4:c5:42:64:fb:0b:7c:
         51:c4:55:4c:0c:ae:f0:74:2f:e4:ef:d6:53:30:80:7f:69:22:
         a3:c6:86:91:db:9e:ba:b9:89:59:f5:d1:04:d4:ed:64:a7:d5:
         21:ec:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:50:06 2026 by rpki-client