Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa
File:                     733aaa0d-8239-3109-af47-430277d59332.roa (raw, json)
Hash identifier:          JhLEttzOiGt6l41M5tirbV5hY4llYnITpAZWC9v4pSg=
Subject key identifier:   70:D2:88:45:72:0A:80:00:D2:9A:21:30:EC:5C:61:A7:24:6A:C2:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8C2AAB2FDCC5C9F93110A800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     396586
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ab:2f:dc:c5:c9:f9:31:10:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=91e4fafa-ea79-4d1c-8f50-c8a4687a1eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:fa:83:74:96:29:8e:8b:e1:d2:74:b9:6f:
                    43:ce:54:b8:e0:83:94:18:4b:01:ff:6a:af:89:3b:
                    c6:7d:cd:7d:7e:2c:33:91:fd:cd:26:fd:60:20:d7:
                    81:20:b1:32:10:aa:1e:77:5c:e0:5b:a9:b7:5e:21:
                    36:14:5a:b6:06:fb:2a:60:02:74:c2:e0:0b:61:31:
                    e3:cc:9d:48:6f:40:dd:24:c8:43:d2:ae:31:94:cd:
                    21:dc:d8:de:46:9d:db:46:dc:11:cd:15:4e:64:71:
                    b8:89:7e:0b:8d:d4:dc:40:19:60:d0:97:77:5b:ee:
                    b2:1c:69:5d:fd:3e:5f:46:55:50:51:9f:4e:17:f1:
                    8b:07:5e:1f:48:01:11:37:20:89:65:9a:a4:e1:e5:
                    45:9c:f1:77:eb:60:64:50:5c:23:d0:bb:28:1a:fc:
                    b7:12:74:bf:1a:af:b6:26:13:4f:59:84:26:7d:eb:
                    42:b5:cc:8b:3f:6f:d9:44:7a:48:b7:2d:8e:0e:e5:
                    ef:4a:65:6e:16:c3:96:fc:70:c6:7f:25:3e:b9:d9:
                    b9:37:99:44:55:ee:a4:c4:4f:5b:b0:8f:ab:d4:af:
                    8d:2c:ee:77:dc:8f:84:09:96:5a:40:49:d8:e9:91:
                    20:41:a2:62:9a:43:f3:76:01:74:ae:85:8a:53:f6:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:88:45:72:0A:80:00:D2:9A:21:30:EC:5C:61:A7:24:6A:C2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:38:57:54:c2:2f:ea:3d:e9:a3:a8:1e:80:60:ae:28:e3:ea:
         d9:79:5a:e5:8d:0b:49:03:58:4e:a2:e5:29:73:78:d9:b2:3a:
         78:03:10:96:1f:e8:6b:e6:b9:54:71:ef:ca:95:c6:e6:b2:d5:
         ad:a7:d0:34:c3:e4:92:74:29:77:92:c2:e7:bc:d8:d5:87:6e:
         65:45:99:2d:52:a9:21:74:05:ff:cf:24:c6:b9:4b:90:01:76:
         ac:b8:f8:5f:0b:77:3a:4c:75:e8:87:1a:56:7e:de:89:06:ee:
         f5:77:ad:35:e4:b7:74:f7:98:36:40:1e:13:5a:6d:e9:0c:c1:
         93:a2:71:58:16:46:f8:5c:f6:bd:c4:ea:2d:81:f5:48:20:ac:
         77:03:79:1a:bc:92:40:79:bc:8d:b0:b1:22:88:82:15:9e:ed:
         ee:68:21:e6:69:f1:b3:2d:9c:3f:3a:83:e7:ce:07:d0:81:33:
         ed:26:c8:85:40:d1:29:f3:ec:f7:b6:fa:64:7f:3c:ec:66:c8:
         26:7b:96:a7:f9:d6:8e:66:7d:ae:27:eb:66:e2:27:5e:9a:f9:
         b5:32:7f:f3:18:51:e5:81:91:d7:c7:a6:db:83:f6:0a:f6:dd:
         f1:98:84:36:8e:3f:16:24:e4:b5:9d:f9:94:00:84:bd:29:83:
         71:b7:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:28 2026 by rpki-client