Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55af4e82-3b3f-3c71-9913-4b31119336cb.roa
File:                     55af4e82-3b3f-3c71-9913-4b31119336cb.roa (raw, json)
Hash identifier:          KbTt9jZP9Xgz0BjjQ5MTb5h2qP39RIVd6zjLvzoWR08=
Subject key identifier:   E0:88:83:19:22:E2:E4:EF:A8:03:A3:E5:4C:76:17:00:53:94:04:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8CCA086BC79B5A439380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55af4e82-3b3f-3c71-9913-4b31119336cb.roa
Signing time:             Thu 23 Apr 2026 14:28:17 +0000
ROA not before:           Thu 23 Apr 2026 14:28:17 +0000
ROA not after:            Wed 22 Jul 2026 14:28:17 +0000
asID:                     396596
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8c:ca:08:6b:c7:9b:5a:43:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:17 2026 GMT
            Not After : Jul 22 14:28:17 2026 GMT
        Subject: CN=3fbfb6fb-ab91-46b5-8a6b-6f0060d94964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:3c:bb:f9:e7:69:73:8e:8f:88:3f:7e:09:
                    03:12:d9:87:4d:c8:f2:92:50:41:cc:64:98:2e:9d:
                    1b:b2:63:5a:05:c8:0b:85:87:17:6e:89:76:9b:53:
                    2f:cb:21:6b:de:d5:db:07:c1:48:b7:96:11:27:99:
                    bf:56:6d:7d:97:c9:e3:45:a0:d3:a3:6e:60:c5:0a:
                    3c:f8:1d:14:80:d6:d0:84:34:17:33:22:b3:0e:85:
                    88:01:7f:0d:88:82:49:27:33:d7:68:13:1b:75:d8:
                    b5:d8:d1:ae:c5:bb:50:30:ad:c2:89:68:90:ec:c0:
                    54:77:28:44:8c:d9:7a:51:94:c8:48:e8:71:aa:69:
                    24:83:cc:d1:1f:cd:1c:80:e0:6f:5e:57:b0:53:83:
                    75:6a:c1:e5:42:af:90:87:0a:2c:2f:43:2f:fc:13:
                    49:d3:c9:a1:90:7f:37:c6:c6:66:42:eb:f3:9a:42:
                    91:8f:c6:5f:41:3d:69:35:da:e7:06:d7:dd:af:dc:
                    49:03:f4:85:e9:34:c1:80:69:6b:78:69:02:01:7a:
                    0b:94:46:9d:ab:e8:6e:d9:d3:a1:ff:a3:62:02:71:
                    42:df:13:75:42:44:72:de:bf:dd:07:f9:6b:10:56:
                    00:17:7b:41:91:d4:d1:57:6e:04:7c:4e:97:cd:96:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:88:83:19:22:E2:E4:EF:A8:03:A3:E5:4C:76:17:00:53:94:04:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55af4e82-3b3f-3c71-9913-4b31119336cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:19:ea:57:de:7f:51:f1:19:8e:96:ab:cc:07:ae:6b:0a:75:
         d1:5f:09:fb:84:2e:e1:09:e0:f3:d1:6f:c2:1c:20:de:a5:ff:
         f2:1c:15:4d:1a:a7:27:57:d6:d9:88:8d:d9:34:3f:e5:16:10:
         e8:ce:e7:e0:d9:de:3a:c0:4f:91:86:00:19:cf:30:09:9d:2e:
         a6:03:7a:ad:d3:eb:81:97:67:13:a4:fa:98:50:dd:62:eb:e4:
         d8:4b:cd:08:22:08:cc:f3:a1:76:6c:b8:39:69:9b:46:f3:6f:
         89:f0:4c:e5:28:54:84:41:ad:be:42:d7:5e:81:ee:2d:4c:ce:
         31:a6:f6:3a:04:21:12:54:63:d8:8a:d4:0d:25:2c:ce:4b:5a:
         a6:52:22:47:87:60:f8:cc:24:84:78:ce:c2:07:88:97:18:9c:
         84:9e:f5:d7:5a:13:e9:c0:11:b0:30:ed:25:75:73:a7:63:d0:
         37:9e:df:85:c5:85:a0:e1:84:80:5e:8f:f8:56:d8:3d:cb:9d:
         d4:97:8b:cc:d6:f9:2d:53:34:60:ac:50:38:25:1b:f5:b2:3d:
         45:6c:ac:f1:da:58:f4:09:09:90:1c:0b:0a:6b:46:c1:f8:85:
         a2:30:54:38:de:e5:08:d7:2e:e0:0c:ea:d0:b4:92:52:67:41:
         37:18:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:47 2026 by rpki-client