Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e27c462-9833-304f-a186-e6645826e507.roa
File:                     4e27c462-9833-304f-a186-e6645826e507.roa (raw, json)
Hash identifier:          +yBZDA81ya5FmXXhvQwDubS0AGUkSqz5eq1fqYd2bUM=
Subject key identifier:   FA:3B:C4:CC:F7:8D:D6:E9:00:9F:49:7D:61:DB:2F:94:00:10:57:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B189D3642E30C0D5E6600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e27c462-9833-304f-a186-e6645826e507.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     397212
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:18:9d:36:42:e3:0c:0d:5e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d37f185f-6d47-405d-966e-7fb08c0c3ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:0b:d2:46:90:53:11:87:bb:46:a1:b1:9c:
                    99:f9:6e:10:3c:58:7f:e3:01:be:0e:af:7c:4d:74:
                    84:6f:4c:fa:47:07:88:0a:d5:47:04:19:9e:6a:a4:
                    b2:58:62:c8:5c:b9:13:be:89:e9:66:58:38:06:90:
                    78:7b:9e:6c:34:ab:e7:fd:c8:50:0d:04:31:63:cd:
                    8b:1d:fe:23:2a:6f:2e:87:5b:f5:e2:66:7e:91:e3:
                    bc:e9:34:17:7a:61:a0:f0:bc:aa:54:1b:33:50:a0:
                    ed:7e:95:5e:80:7b:56:81:6a:78:03:37:70:81:65:
                    39:67:7d:dc:f2:c0:7b:a6:69:d9:75:55:2f:42:87:
                    47:54:20:c9:fb:7d:11:d3:6b:47:56:c6:17:3a:61:
                    7d:18:fb:c4:d8:d4:6f:02:7b:66:0e:ec:6b:57:d3:
                    49:f0:67:58:8b:fc:e3:95:f2:5d:ba:dc:bb:b5:74:
                    79:ea:31:aa:cf:dd:06:cb:f9:a4:3a:af:ad:c0:7d:
                    9a:b2:d3:04:fd:e9:32:7e:e7:b3:2b:1f:bd:8b:6c:
                    07:1a:b9:3d:36:13:4b:07:33:3f:41:a1:16:c5:c6:
                    e9:70:79:3e:fc:45:87:82:4e:df:fe:47:c6:12:52:
                    9f:5a:0a:da:91:0b:0f:92:96:3f:70:dd:4c:b4:19:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3B:C4:CC:F7:8D:D6:E9:00:9F:49:7D:61:DB:2F:94:00:10:57:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e27c462-9833-304f-a186-e6645826e507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:cb:a6:e6:74:b1:36:84:29:e0:c7:3b:65:c1:be:58:65:
         b4:24:bd:d9:95:41:04:74:85:66:7b:84:18:49:81:9c:9c:ed:
         d2:97:b1:3a:3a:cf:e3:a8:eb:18:0d:d9:4a:71:65:24:33:87:
         cb:c2:81:b3:bc:00:6c:61:8e:82:19:1b:0d:f0:30:e6:45:22:
         43:96:1c:bc:8b:d9:f8:69:df:1f:70:54:5b:92:6a:d1:81:f6:
         42:71:f3:cc:39:02:b0:d2:2f:39:14:a6:2c:fc:6a:fb:fe:87:
         6a:e2:8e:27:f1:13:78:ca:37:f0:71:55:f1:93:94:ea:39:9d:
         c1:04:d9:1f:ee:04:08:e2:27:bb:a8:8a:0c:79:a5:e2:89:61:
         a7:93:10:ae:ab:3a:b3:63:47:c6:9b:83:a9:af:8a:7d:80:94:
         b9:10:99:16:63:f6:5a:27:5e:cb:7e:93:e9:7c:2f:0d:18:5b:
         47:3b:98:4b:f9:d6:bc:e6:e1:22:08:3d:d7:a3:1b:92:e6:a6:
         41:61:b3:eb:bc:4e:3f:f6:30:18:5b:e7:22:0e:92:fc:f7:70:
         df:3d:26:8c:e1:5d:0d:5a:08:75:32:4f:b2:5d:2d:76:6c:0b:
         45:20:bf:07:2f:b1:70:63:b6:de:e2:c5:d1:47:b4:64:72:ce:
         0b:99:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:04 2026 by rpki-client