Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72858e64-87a5-340a-b921-7161265fc8df.roa
File:                     72858e64-87a5-340a-b921-7161265fc8df.roa (raw, json)
Hash identifier:          4JhE4ZYBwPafbN8XV/uRjHjtBtuc0z05MjU4SJ4w3AY=
Subject key identifier:   5A:32:43:85:33:EF:C4:50:D5:A8:2A:7A:1F:C5:24:B7:7D:99:9B:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D975559EAA908CEDC980E0C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72858e64-87a5-340a-b921-7161265fc8df.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     36622
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:59:ea:a9:08:ce:dc:98:0e:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=8b324e3c-b6b6-4eaf-893f-50c72ff799c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b5:53:a9:3b:88:08:ae:46:3c:65:70:8d:4d:
                    75:d6:ca:d4:0a:2f:82:95:12:10:93:ce:9f:f2:6e:
                    35:f8:9d:4c:67:a0:d8:b8:9f:e3:cd:30:cc:fa:7c:
                    cf:3c:63:39:50:b6:5f:94:b7:02:08:eb:a1:26:31:
                    82:d7:bc:14:97:aa:69:64:e0:7d:da:f7:90:e5:cc:
                    79:f2:e4:63:fb:5c:fb:07:89:2d:f1:88:17:93:63:
                    2c:a7:c0:79:b3:e6:5e:8d:1a:a0:7b:6f:ce:54:0c:
                    8b:30:cf:0e:50:b8:af:01:dc:7b:08:75:c7:dd:ac:
                    14:90:94:a5:18:b3:7e:d8:a9:49:bd:65:40:f3:6b:
                    00:c4:52:1c:44:43:2f:10:a3:d9:46:76:3c:3c:ac:
                    1c:04:83:7a:32:06:f6:d0:df:a0:14:9c:cc:31:a4:
                    33:ab:58:b7:6a:de:74:49:5a:45:e1:47:bb:5e:b0:
                    cd:92:7a:ab:1f:d0:b2:7d:cc:89:2a:85:08:04:33:
                    f0:93:67:d5:aa:18:3a:90:0f:a5:d5:9b:0e:45:dd:
                    0d:8c:f2:33:f5:5d:8b:c0:84:56:90:54:1d:4f:c9:
                    a3:8c:ac:cb:00:bb:54:77:f3:c9:b0:7f:27:f3:2a:
                    f6:91:f0:60:85:8f:6c:c7:a6:43:f6:a3:d4:ff:38:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:32:43:85:33:EF:C4:50:D5:A8:2A:7A:1F:C5:24:B7:7D:99:9B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72858e64-87a5-340a-b921-7161265fc8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:7a:d0:5b:cf:04:74:fe:54:6d:47:03:17:1c:8b:56:13:
         a5:01:b8:6b:4a:05:06:31:c2:68:23:a1:bf:f0:3b:7f:79:a4:
         6c:a5:af:c0:7a:58:ba:f2:7c:58:e9:a3:3f:b3:1d:09:a1:b1:
         b4:30:12:0e:d2:f9:16:7e:84:c0:32:84:f4:b3:d7:4f:69:6a:
         6c:33:8a:86:12:ca:98:e7:b0:77:f5:f5:24:2a:53:1e:9a:2e:
         5c:7e:44:3a:e1:db:8f:af:ba:fe:fd:b5:e1:47:a2:0e:d3:a4:
         4a:e3:ef:af:d5:62:57:15:80:e3:72:4f:6e:fa:68:4d:2a:d6:
         13:53:f6:df:3d:b1:e9:a4:9d:da:fc:26:98:f6:6f:22:30:64:
         d8:5b:9e:69:45:63:e3:ac:94:9d:ba:65:74:06:01:30:6c:fb:
         f9:83:6d:84:9b:47:85:36:49:67:a4:d3:b4:d5:29:f5:dc:62:
         b3:9c:3a:5d:30:fc:5f:ef:60:2d:6f:83:36:cf:b3:a2:68:e0:
         ed:d3:72:11:26:8e:23:eb:d9:32:a5:03:4b:c6:1b:c7:4e:ec:
         5f:fd:4c:d0:8f:64:f0:f0:88:b5:6a:d2:11:b1:bf:55:89:95:
         ce:bd:1d:93:8b:79:96:d2:fd:77:00:20:b7:81:69:55:93:18:
         56:44:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:43 2026 by rpki-client