Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70c899e9-1db4-3b74-85f8-057fef685b05.roa
File:                     70c899e9-1db4-3b74-85f8-057fef685b05.roa (raw, json)
Hash identifier:          +OIXlqXhv913JRzd8H50jNUrGgWHZ2iCjVb4gu1un6k=
Subject key identifier:   93:56:91:D0:6D:59:6A:7F:98:95:0E:FD:02:A1:DA:F7:9F:96:7B:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3AF4EC9BFC79BFDC7C6A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70c899e9-1db4-3b74-85f8-057fef685b05.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22547
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f4:ec:9b:fc:79:bf:dc:7c:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=02a4840a-6b29-47fc-8d72-fc7097c90964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8e:34:a4:96:9e:9f:c6:34:d8:bf:92:2d:88:
                    55:fc:65:b5:00:e2:55:d8:50:64:61:25:ce:3b:c2:
                    94:e5:ae:41:23:ed:9e:80:fa:fa:db:64:12:30:cb:
                    2e:95:46:02:13:47:35:23:cd:db:25:40:0f:2e:f2:
                    c5:53:33:9f:7b:74:fe:8f:e0:e0:7c:82:48:cc:29:
                    5a:c3:0c:09:ee:67:69:41:e3:a6:be:33:67:0d:81:
                    65:fc:d4:ed:29:89:ac:a6:6d:8d:3d:45:27:50:55:
                    5d:82:64:c2:5f:76:e3:2a:02:30:53:30:ac:26:9c:
                    99:c2:e8:36:c4:d8:63:6c:aa:f2:f3:33:28:ae:43:
                    fa:20:9b:ca:53:27:47:91:84:cf:ec:6a:b0:f7:ea:
                    6a:93:71:bf:f1:8e:56:89:48:a2:05:c7:b9:83:81:
                    fe:c9:f2:7d:21:d6:ef:e7:58:6d:e9:3b:ff:40:e0:
                    2e:ef:af:24:9e:19:76:ec:a9:94:f1:e6:a2:71:71:
                    5f:f2:9c:d9:6b:69:9b:27:57:df:7c:b0:cf:d7:2e:
                    d3:8c:34:19:b5:73:c4:b1:33:49:82:c5:47:15:ce:
                    a5:a6:f8:aa:fb:df:b6:2e:50:c9:5e:6e:ea:03:98:
                    41:75:cd:ae:4b:b9:3c:bf:0f:b7:8b:8e:95:cd:d4:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:56:91:D0:6D:59:6A:7F:98:95:0E:FD:02:A1:DA:F7:9F:96:7B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70c899e9-1db4-3b74-85f8-057fef685b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:93:69:13:bf:52:56:51:43:b8:17:e5:8c:5f:e9:aa:97:5c:
         3a:bb:2d:a8:44:82:7c:8e:11:15:25:cd:b3:cd:ad:33:75:db:
         0d:a1:76:1e:c1:dc:93:3f:4d:82:f3:32:2e:78:6e:5c:45:a9:
         92:97:3a:59:25:4a:e3:93:3c:b9:9a:ad:ae:7e:ee:b3:aa:64:
         3a:43:a1:d6:6b:46:e4:e5:b4:9f:7e:2d:1a:fe:96:1c:9a:a6:
         e9:6a:5b:36:df:67:e1:3a:c5:60:b2:97:67:a7:bb:d8:0e:d0:
         f7:46:26:15:84:65:46:2d:d4:43:7a:6d:bb:fb:0d:e2:79:cc:
         5a:a6:78:42:59:15:4b:3a:43:8d:dd:04:ec:ec:fa:50:cf:09:
         b0:77:f4:6b:ad:28:fd:65:31:f8:0a:a2:d4:2a:c2:74:c0:80:
         df:c1:43:51:31:37:09:ea:58:e6:b8:2f:fd:a6:ca:99:83:08:
         76:98:90:71:4b:d5:80:0a:30:d8:9c:a2:97:03:39:85:86:a8:
         c4:56:7d:fc:06:8f:ec:02:f6:83:4a:4b:2e:82:ed:69:f5:35:
         58:45:c6:8b:86:60:99:59:e2:59:db:90:92:08:3d:0d:39:86:
         8b:89:d3:1e:ab:14:96:3c:02:71:c7:8c:86:85:5f:65:16:45:
         7b:fd:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:12 2026 by rpki-client