Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa
File:                     4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa (raw, json)
Hash identifier:          MHxTnv2/V6d4kIyAOGEh8jOulaNcSSA4BKxCn0NQnw4=
Subject key identifier:   5A:55:62:5E:78:D7:66:87:67:A1:A5:33:97:3F:E3:56:D5:BA:E6:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA04717E3CBD10B32A8C860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     396566
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:47:17:e3:cb:d1:0b:32:a8:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=7f522ea0-c075-461e-beb2-7874479087ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:50:85:56:ae:e4:4c:d7:f7:37:4f:9b:50:
                    aa:91:3a:42:ab:a3:fd:92:9a:20:55:78:87:0e:5b:
                    ab:ab:83:0d:0e:f8:8e:4b:5f:5b:11:80:70:67:c9:
                    e3:48:ac:7f:2e:f8:fa:dc:b4:a1:64:ca:9b:1c:13:
                    8d:2a:6a:b9:28:1d:15:3e:f1:ed:1b:1d:02:14:b3:
                    5e:ce:1d:7b:4b:4b:77:0d:26:f7:f3:f0:ae:5a:cc:
                    12:a1:24:2b:b2:96:b2:53:e9:f4:fa:0b:9c:6c:73:
                    34:d9:c7:b6:91:aa:c2:0c:fc:b6:5b:90:12:e3:55:
                    73:5c:c0:94:f9:95:7b:da:a3:00:b1:e4:7f:c7:20:
                    73:45:ca:ca:9e:d6:13:56:6a:6f:ae:60:c3:68:ab:
                    8c:e4:6f:e1:a1:46:0b:04:54:c0:9f:dd:25:41:8c:
                    f4:5c:d5:f9:f4:0e:1b:3f:1a:b2:ee:e9:73:a4:3f:
                    ba:7b:15:70:d8:d6:6e:7a:8d:22:01:44:f5:60:ef:
                    2c:ce:0f:61:6c:92:13:14:b1:75:c9:eb:cd:df:24:
                    26:51:53:17:94:4d:55:e7:13:db:81:81:28:6b:ec:
                    3e:dc:81:7f:e0:9d:c0:ea:f5:f4:7b:45:18:c1:eb:
                    3e:0e:27:a0:ae:be:3c:ac:be:d9:36:06:c5:7c:ce:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:62:5E:78:D7:66:87:67:A1:A5:33:97:3F:E3:56:D5:BA:E6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:23:fa:2e:b5:ff:cb:18:43:e4:9a:6a:67:31:5e:16:a9:
         26:b7:21:81:fb:4f:ca:97:f1:56:54:6e:ea:df:5e:57:34:47:
         9a:96:a8:db:14:52:82:c4:5d:fc:37:f8:0d:67:25:56:1a:1f:
         43:e1:f4:2d:29:41:c2:2b:c9:cd:55:7c:b4:a9:8a:43:20:b9:
         48:b1:f1:30:d4:b8:52:a0:05:0a:eb:69:97:4e:b6:39:59:aa:
         4f:3e:8d:c5:0c:ae:8d:78:d1:0f:c0:22:de:eb:96:fc:e8:e4:
         76:fb:7a:d9:7a:80:29:96:75:c1:71:a6:31:57:30:0e:02:93:
         39:7c:68:e9:2e:69:14:29:d9:c2:0b:d4:23:82:84:69:6d:a3:
         0f:75:13:cd:59:b3:9c:87:8d:51:0f:cf:0b:51:5f:dc:a6:92:
         0c:45:5d:92:0a:23:c6:7d:68:7c:bc:d8:00:81:87:fe:4d:42:
         3b:95:58:a4:c5:67:cd:d9:37:f1:4d:01:88:1d:8d:66:92:2c:
         80:7c:91:57:9b:e1:d4:f5:50:fb:12:25:d6:ad:99:61:10:f8:
         ad:af:b0:3b:ef:73:c6:de:83:09:85:bf:a5:75:16:4b:14:7d:
         ae:03:28:88:fc:b1:c3:9a:37:4d:7d:5b:6a:60:1e:47:6c:e0:
         83:18:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:59 2026 by rpki-client