Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb8ec47-51aa-3447-912f-cad2bf2a58a7.roa
File:                     4eb8ec47-51aa-3447-912f-cad2bf2a58a7.roa (raw, json)
Hash identifier:          OzINropSw7SsJCPnbXeDkZl52gjaH36jL44RtolimQs=
Subject key identifier:   11:27:90:5C:8A:51:2C:BD:13:3C:56:74:23:31:5F:5F:1D:44:8E:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B855BD4C6DE7982A0C04480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb8ec47-51aa-3447-912f-cad2bf2a58a7.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396588
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:5b:d4:c6:de:79:82:a0:c0:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=312c5920-146f-43c8-8b22-8174df9d5889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:c3:b1:18:4f:14:ae:08:a5:5b:1e:13:80:
                    d6:f6:f8:da:bb:71:15:c6:d7:02:60:e1:aa:9d:88:
                    86:ee:f2:13:ee:de:19:2b:05:b4:45:d6:37:85:17:
                    60:f4:bf:86:b9:a5:70:f9:12:3c:f3:f1:03:8b:c7:
                    f5:70:ca:7c:cb:6a:b3:2e:59:2d:3f:bd:f6:00:31:
                    80:a8:b9:37:21:51:8e:f6:3a:fb:e8:7a:c0:fe:f2:
                    13:4b:9b:63:3d:f5:ee:58:a3:23:ae:e5:03:d4:cd:
                    bb:84:da:92:67:ab:60:1d:56:57:6a:78:7f:f0:d6:
                    6c:ad:9d:08:65:e3:88:55:d0:d3:e4:9e:93:64:0c:
                    0b:ed:90:f5:9e:00:ef:87:47:62:1a:b5:c1:92:2f:
                    ea:d0:96:6f:e0:e9:c5:ba:cb:20:7e:1d:79:f9:a7:
                    71:2b:4c:75:6e:4c:cc:f8:ac:af:c6:be:5b:c8:48:
                    ad:13:f1:95:19:58:db:0b:c2:b0:f9:6e:1a:91:08:
                    86:3e:c9:fe:4c:e3:ed:18:a7:0c:cd:15:26:64:b2:
                    66:a1:a9:fd:0e:9e:fb:60:6e:ef:59:e8:8b:27:7a:
                    fd:07:00:b8:58:4c:ca:51:c5:33:b1:38:f1:d4:71:
                    97:e0:a8:0c:89:e7:d0:bf:71:76:f7:33:86:36:54:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:90:5C:8A:51:2C:BD:13:3C:56:74:23:31:5F:5F:1D:44:8E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb8ec47-51aa-3447-912f-cad2bf2a58a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:43:36:cd:61:b8:09:eb:f1:08:dc:08:3a:a5:b2:01:c3:14:
         db:ea:e5:43:8a:52:00:51:73:37:4e:1c:c2:8e:4a:06:4e:16:
         f7:00:4d:43:d3:a7:03:29:9b:4e:5b:a4:ba:54:74:67:23:87:
         e2:4e:04:f9:cb:66:e7:ae:7a:3b:45:a0:3e:98:f1:b5:52:1d:
         e0:62:61:13:8d:6e:b5:1e:84:56:f4:c9:f4:60:52:bd:0b:1e:
         f5:c0:f7:1b:7c:ab:66:ec:33:a5:6b:df:29:81:3f:10:90:c8:
         94:ab:a1:79:c3:74:0f:29:92:7b:a9:73:da:c1:aa:45:b5:b6:
         49:51:e9:56:78:4b:f4:c1:36:53:62:a1:4d:37:a0:84:d5:1a:
         45:80:c4:61:38:2d:dd:a2:e1:16:dc:99:94:e7:02:15:ac:14:
         30:1b:ec:26:da:17:31:48:f9:fc:ac:c8:41:4e:e1:ba:53:36:
         cb:0d:60:ce:9c:25:36:2e:b0:b9:ce:a4:40:2e:ba:01:f4:4f:
         fe:07:c8:0d:e8:b2:e2:3b:e9:8e:81:9c:69:3f:7c:e8:8a:b6:
         7c:6c:95:ee:ed:83:0f:35:90:b2:20:74:11:de:ab:6b:fc:af:
         a7:c9:74:c7:7d:be:86:ea:2f:c7:53:8d:e4:f5:e3:f6:72:ee:
         7d:00:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:37:36 2026 by rpki-client