Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa
File:                     25aab43d-1193-3c5e-8e95-176e8092bfd3.roa (raw, json)
Hash identifier:          oDKtwaY507p1Yd27CvYSk6RHpW2gLqEN1C00qLJBl0I=
Subject key identifier:   7A:8F:D0:D5:06:BF:66:BA:03:62:51:BD:19:B5:6B:C7:99:E3:C0:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3ADE8DD93B78DCA42A42A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     396578
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:de:8d:d9:3b:78:dc:a4:2a:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=f5b92ed1-4499-4d8c-abdf-f0688c9940ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:02:0b:cc:b2:bb:fd:17:47:f4:dd:d8:9c:
                    d8:11:c3:07:59:dc:21:1d:22:a4:13:3f:d7:b7:43:
                    a5:2b:68:88:93:ef:12:61:1c:1b:40:55:27:73:73:
                    39:91:55:ac:eb:90:79:e8:af:43:0c:45:31:30:8b:
                    8e:76:96:6d:c8:ca:00:49:45:96:e3:ea:63:4a:e5:
                    d9:b2:5f:28:86:67:6b:00:35:39:24:da:10:e1:92:
                    a0:a7:4f:12:be:b2:f7:91:f3:7c:51:5a:ba:83:31:
                    23:16:6e:75:66:6f:09:3b:f4:08:59:ac:47:0f:ef:
                    c6:eb:11:6e:d5:af:2a:bb:2b:b0:be:6b:12:e4:5c:
                    27:21:72:11:68:50:d0:56:64:df:28:3d:fa:a6:a4:
                    73:fa:44:23:41:3b:43:79:35:1f:b7:b1:c3:66:d3:
                    6a:3e:5b:e7:92:f9:61:02:ed:6a:41:f7:72:7c:b9:
                    5e:74:1d:d2:cf:a7:d2:8b:8d:f2:9f:d6:2e:7b:75:
                    cf:ea:dd:5f:6e:39:92:38:f9:94:93:2f:d4:78:7a:
                    d7:fe:e4:30:4c:3d:c2:93:9f:d0:da:1d:57:30:fe:
                    9e:18:3e:dd:65:06:fc:59:3f:ad:2e:62:f9:25:35:
                    1a:e7:0c:1a:a1:98:b4:bb:c1:03:2e:96:08:66:1f:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:D0:D5:06:BF:66:BA:03:62:51:BD:19:B5:6B:C7:99:E3:C0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:53:36:f0:b7:2a:a5:12:ad:7f:e3:c8:c8:a9:77:12:da:7a:
         e8:02:31:c2:14:53:6a:7a:4c:b4:a9:12:d5:30:b1:7a:aa:09:
         8d:55:1c:9b:29:55:37:00:33:dc:0b:73:55:4f:2f:d2:25:a4:
         43:75:c2:06:d7:42:97:12:b4:c8:5e:c9:ce:8e:1c:ac:5b:04:
         ee:6b:63:dc:1a:d6:4a:ca:f0:c1:31:8e:3d:7f:9e:91:93:d9:
         20:02:c7:1f:e7:33:f7:5a:df:62:33:3c:ce:56:b5:ef:df:5a:
         01:09:a9:be:93:a9:45:74:cd:97:8c:74:94:9f:eb:92:97:da:
         43:65:4b:b9:bf:62:ba:d3:3c:d1:9f:fb:cf:03:af:a1:dd:56:
         8a:54:15:84:17:4f:b0:68:e9:db:77:a4:83:81:d5:4e:6f:23:
         0a:5f:9e:02:79:41:d9:05:20:d1:91:de:88:7e:ed:c7:03:00:
         91:16:62:0d:2a:51:2a:2a:33:b0:96:fa:9a:13:14:bf:5e:37:
         8d:34:38:86:bf:72:6f:31:e8:e1:eb:ff:85:7a:f1:4c:c3:80:
         e1:db:31:25:c5:85:58:4c:62:99:19:db:75:93:6b:6c:e6:84:
         75:5a:21:1e:1b:f2:59:83:8d:f4:76:81:da:64:fd:b4:ab:25:
         5e:03:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:49 2026 by rpki-client