Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48428637-c7e2-3142-9012-651b0e47edb3.roa
File:                     48428637-c7e2-3142-9012-651b0e47edb3.roa (raw, json)
Hash identifier:          xwOaHLaJRPtsXmMDidANYuYbicetsSNOACWl7ij/OQo=
Subject key identifier:   F6:B7:82:A4:9C:7B:52:FF:37:43:AA:15:9A:97:F1:1B:39:AE:F6:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFC45918ED8551DD91BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48428637-c7e2-3142-9012-651b0e47edb3.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     36631
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fc:45:91:8e:d8:55:1d:d9:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=b37055da-809c-4178-befd-578cc90d57ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:21:47:00:72:8e:4e:81:23:1f:29:48:30:
                    82:67:32:95:6d:43:82:30:d2:ac:b3:05:ef:45:1f:
                    b3:12:72:b2:a5:5c:4c:2a:74:9b:15:47:b5:db:e6:
                    9b:f4:34:a1:f0:06:0b:db:99:93:11:46:05:45:3e:
                    e9:60:70:f6:3f:28:cd:c0:8f:d3:6b:cf:90:e2:f7:
                    9c:11:11:a4:5d:09:e2:83:93:93:39:8c:e3:8f:65:
                    cd:a0:5a:97:72:4d:dc:c7:cd:88:5f:0e:34:12:b4:
                    fb:41:5a:e7:5f:85:a3:d0:05:3e:db:bd:c4:9f:b7:
                    58:27:c8:21:5d:3b:50:0e:79:8f:c7:7c:91:76:b7:
                    98:a9:22:7f:58:41:b7:84:39:90:9e:d7:c6:cc:7a:
                    8f:6b:2e:9e:09:12:1d:43:b5:a8:42:54:8f:52:d3:
                    7d:71:41:19:62:dd:76:51:33:29:40:2f:5a:7d:0b:
                    e8:92:2f:12:59:6f:47:ba:c6:c3:54:bc:9e:24:e9:
                    fd:46:8f:47:ae:ba:67:5b:89:c2:6f:a2:b1:18:94:
                    29:46:cb:a7:0e:54:f0:e5:da:f3:b8:df:10:7d:2c:
                    e9:8f:2a:0f:44:b3:79:42:d5:8d:8d:4f:59:53:d2:
                    04:bf:6d:dd:51:57:59:e6:cd:de:e0:ea:8e:99:5f:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:82:A4:9C:7B:52:FF:37:43:AA:15:9A:97:F1:1B:39:AE:F6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48428637-c7e2-3142-9012-651b0e47edb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:6a:84:3e:d8:d8:83:5a:9a:46:40:c3:f0:c6:35:21:e2:
         3e:47:5d:7c:16:74:45:f5:f0:d9:e2:56:5e:86:81:a2:bb:85:
         3e:f4:45:0d:eb:be:05:80:5e:ad:4b:a0:13:7e:40:cd:e6:4d:
         0b:46:20:15:c4:56:26:8a:5f:ae:37:c8:07:18:34:f3:90:d8:
         63:55:0d:cf:48:de:6a:be:b7:9e:77:c1:92:41:bb:0d:56:80:
         9a:79:d1:72:dd:a8:06:46:c8:f0:73:83:35:d8:4d:68:b9:11:
         4c:69:79:39:86:dd:43:98:ff:8a:76:ca:0c:bb:ab:d4:e0:4f:
         62:17:eb:25:eb:b5:0a:3d:5a:b4:1f:5a:82:5a:ff:8c:f5:15:
         e2:5a:e6:77:36:42:9d:5c:7b:39:41:2e:a0:e3:17:25:13:ea:
         15:1a:78:3f:62:4b:07:5a:38:14:f7:41:2a:4b:e0:21:e3:bd:
         fb:fb:cc:e9:e1:b5:f2:66:b5:bf:50:d8:c1:cd:90:d3:7e:ce:
         8f:56:a6:db:03:31:47:f0:c8:53:51:f8:d9:d2:de:a6:12:f6:
         23:34:38:48:d8:7d:6b:f8:8a:8e:7b:7a:e6:fb:87:f0:d2:2d:
         d5:a0:52:05:64:ce:52:74:78:56:1a:2f:96:23:d6:a5:69:60:
         53:f2:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:03 2026 by rpki-client