Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51c3e584-2383-3745-9024-3095f936c032.roa
File:                     51c3e584-2383-3745-9024-3095f936c032.roa (raw, json)
Hash identifier:          Iy/qPNZOYJy9/gf9ThMZeOlHhe6f/WllhFPs7cj5cGs=
Subject key identifier:   AE:D9:95:AD:F1:6D:AD:64:62:73:1C:0C:62:B1:3F:BF:CB:4E:6B:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F348B87FB5A7C11A80D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51c3e584-2383-3745-9024-3095f936c032.roa
Signing time:             Tue 28 Apr 2026 14:56:58 +0000
ROA not before:           Tue 28 Apr 2026 14:56:58 +0000
ROA not after:            Mon 27 Jul 2026 14:56:58 +0000
asID:                     397203
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:34:8b:87:fb:5a:7c:11:a8:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:56:58 2026 GMT
            Not After : Jul 27 14:56:58 2026 GMT
        Subject: CN=39c3f0dc-d18e-4866-99e7-15a9bcc889e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:f7:09:ba:db:38:17:06:89:a9:5d:4e:51:
                    14:c1:bc:ef:6a:48:9a:31:27:de:1b:f9:e8:d0:b4:
                    8d:c1:8e:32:c2:c2:45:69:03:08:bf:fd:39:d9:1c:
                    8b:b8:48:89:b4:f0:16:a0:75:bc:65:d0:36:dc:fe:
                    2b:41:67:40:fb:37:dc:55:a1:02:f8:26:46:40:a9:
                    1a:00:77:f2:d1:bf:c7:37:d3:84:4c:00:db:43:d4:
                    96:e4:60:a4:f2:cc:9e:69:9a:c4:49:37:d3:28:7d:
                    d9:cb:c6:e4:cc:12:3e:17:06:1c:58:ff:1b:be:70:
                    69:48:7c:ba:af:4b:88:1f:6b:91:96:12:ba:9f:a7:
                    9a:63:13:1d:93:6f:e6:d0:fa:ee:8b:66:c5:81:00:
                    04:68:8c:10:5f:0d:76:83:d0:94:06:41:05:3a:5c:
                    69:69:56:5c:31:35:98:73:f8:40:44:02:a3:a6:39:
                    9c:a1:9c:8d:f3:a2:72:d7:b1:75:9d:4a:00:51:c2:
                    91:59:a8:d6:4c:83:bb:f2:05:90:fb:df:ea:98:77:
                    21:4f:e8:78:7e:47:b7:9c:27:a5:35:13:0b:5d:82:
                    e2:32:8a:7d:ab:71:76:4d:0f:f0:22:87:f3:28:80:
                    0c:87:69:99:6e:3c:3d:29:f8:7e:ce:ae:72:63:46:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:95:AD:F1:6D:AD:64:62:73:1C:0C:62:B1:3F:BF:CB:4E:6B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51c3e584-2383-3745-9024-3095f936c032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:d3:c1:9e:f9:6e:26:6f:01:c3:fb:7c:61:7b:b4:55:12:
         4e:a7:61:38:86:1a:93:8d:b0:25:06:b5:23:35:62:1f:90:f6:
         d8:a0:a0:21:02:55:bc:68:6b:85:10:28:28:06:2d:ab:4a:17:
         8b:b4:b5:17:fe:91:42:47:f4:fb:44:ab:9e:66:8e:94:df:40:
         ce:b5:3c:54:18:de:c6:9e:25:ac:1e:c8:14:4c:76:64:29:5e:
         94:f6:be:9c:55:9f:be:a9:8c:8f:e9:5b:ee:96:9d:60:4b:be:
         81:0e:00:22:ac:c6:71:ed:d5:ac:1a:b5:c2:01:4a:37:e9:03:
         47:5a:05:32:c1:19:b3:ca:6e:8c:10:27:8d:b4:bc:18:fc:2d:
         fb:2a:b2:7a:b0:86:7f:03:63:2d:6c:c1:bf:7a:2e:65:ba:d2:
         88:41:d9:7b:35:c7:bc:e6:76:17:cb:1f:89:17:d6:d2:d5:27:
         2e:7f:6d:42:e0:55:0f:23:c9:70:cc:0a:fe:88:44:e4:ed:22:
         ee:22:16:64:91:4c:68:6f:15:17:87:ca:59:6d:80:c7:a6:eb:
         40:e7:13:45:8a:d5:f3:0a:20:2f:6c:02:4f:eb:90:09:56:8f:
         b5:d5:ca:e7:a1:9a:23:e6:d5:d5:af:fd:6a:63:d9:d2:04:b8:
         ae:1e:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:50 2026 by rpki-client