Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57bbf538-f49e-33b9-8e3d-acb32a5b4529.roa
File:                     57bbf538-f49e-33b9-8e3d-acb32a5b4529.roa (raw, json)
Hash identifier:          5Efww56Tf1Ynsrg++w8HUJHe6iTo7E3WeRkFq346aD8=
Subject key identifier:   71:B8:0A:10:05:D2:5F:63:06:D8:96:52:36:FA:15:45:0D:AF:06:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DADCEFAB3D08AC81FED808780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57bbf538-f49e-33b9-8e3d-acb32a5b4529.roa
Signing time:             Thu 30 Apr 2026 14:13:27 +0000
ROA not before:           Thu 30 Apr 2026 14:13:27 +0000
ROA not after:            Wed 29 Jul 2026 14:13:27 +0000
asID:                     396550
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:ce:fa:b3:d0:8a:c8:1f:ed:80:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 14:13:27 2026 GMT
            Not After : Jul 29 14:13:27 2026 GMT
        Subject: CN=62f8e675-0e52-4e9e-b74e-96b363d96b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:41:ac:33:aa:d2:f0:d9:49:60:de:e9:1b:
                    11:44:fa:56:60:25:65:dd:41:de:8a:0b:2f:a2:24:
                    8e:48:54:e6:1c:9c:a7:9b:52:17:c0:fc:f2:76:3d:
                    d6:04:74:7b:7c:f3:e1:26:b5:d8:e3:9c:eb:4a:cb:
                    96:2a:c5:47:58:0f:4a:77:90:0a:47:2a:b3:c2:f2:
                    1c:4e:21:a2:43:b4:dc:e3:ae:e7:97:ed:15:69:ad:
                    d9:09:3d:01:20:c2:13:75:0e:b4:f0:9a:21:12:78:
                    2c:cf:25:b6:9f:ac:b9:55:79:9d:1e:34:97:2a:f3:
                    d8:4c:50:14:52:59:eb:42:e1:b3:76:ad:13:5f:13:
                    e8:b2:8d:d7:64:d6:20:5e:78:82:0e:a9:d4:9e:76:
                    9d:67:29:63:06:1d:89:8e:22:f1:2e:e3:c4:41:95:
                    e7:f3:53:3d:5b:3a:09:16:1b:0d:55:57:7a:96:e5:
                    95:68:e5:41:6e:04:07:7b:87:f6:77:97:10:87:b7:
                    bf:28:c3:8b:d2:83:eb:b2:a6:9f:82:bb:ca:c3:8b:
                    39:43:87:35:2d:aa:59:64:74:26:13:89:4f:0d:93:
                    5d:3d:37:e6:32:19:49:bd:9d:3f:bd:c2:e7:da:f4:
                    43:55:5f:f1:93:15:52:2b:8d:f4:01:e5:e3:6a:e1:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:0A:10:05:D2:5F:63:06:D8:96:52:36:FA:15:45:0D:AF:06:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57bbf538-f49e-33b9-8e3d-acb32a5b4529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:04:ed:22:07:c9:11:d7:1b:df:05:85:81:df:83:c1:84:
         55:3b:2a:b4:9b:c8:55:03:79:25:ab:bc:e8:c1:d2:04:84:30:
         a4:a7:7c:e5:35:92:ca:5e:c0:67:8a:16:78:82:87:f0:6a:6f:
         df:05:fe:d3:34:84:64:1d:9b:e2:28:10:90:d9:ed:3d:88:5c:
         c7:8d:2a:6b:ad:f0:1d:18:a3:b2:83:48:40:f1:cb:a9:6b:ad:
         42:b6:75:3c:56:e9:bc:dc:88:c7:6d:ee:33:e2:22:80:89:b8:
         07:ab:3c:d7:f6:bf:fc:40:1f:30:22:3b:0c:5f:f1:c6:81:97:
         7e:38:17:ca:25:16:be:97:3e:5a:bd:78:60:8b:f5:56:a6:4d:
         77:d4:33:9a:8d:d5:30:be:48:1b:33:c0:d1:8e:6e:a7:d8:f6:
         40:65:7a:52:64:94:2a:71:61:e2:8d:61:fc:5c:5d:6b:43:1a:
         ad:f6:25:36:6e:85:e5:81:9f:7e:d2:cb:f9:22:be:36:15:18:
         6c:3c:c7:f0:cb:b6:99:bc:bd:60:e1:c1:97:d4:16:82:95:10:
         83:a0:93:11:ea:39:ee:eb:e9:58:e0:74:bb:08:36:87:74:7a:
         97:8a:31:84:fe:f8:80:99:35:fb:3e:36:fe:fd:f4:c6:2a:a3:
         5c:80:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:59 2026 by rpki-client