Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa
File:                     821fc637-901f-389b-a543-7673ce7660ba.roa (raw, json)
Hash identifier:          /H4vuOoF4wc2oq+8WYPAWp/fzQeWUf6CUIGlkV60FOI=
Subject key identifier:   6B:71:A4:47:BD:83:F8:2A:57:38:D8:B7:13:52:9E:5A:77:05:68:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE05009748DC17D25DBB680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     397209
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:50:09:74:8d:c1:7d:25:db:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=fede2585-58ff-4565-ba4c-90853eec689b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:93:07:22:0b:b0:a9:52:cd:af:c4:36:6a:
                    65:13:73:17:36:2a:f4:82:dc:d1:22:fc:43:96:2d:
                    9a:f1:bf:b4:5d:97:bb:ca:3c:48:c9:61:08:8c:88:
                    48:dd:f9:56:44:43:49:13:66:ba:cd:4e:d6:81:68:
                    db:c0:3b:7d:9d:6a:3d:33:0c:0f:7e:8a:b2:00:9e:
                    67:b4:13:ed:3e:c8:0b:56:a9:b1:3b:49:c3:a6:c0:
                    c6:7c:fd:97:81:9d:db:73:1b:60:e1:db:06:bf:f2:
                    56:75:eb:9f:55:8d:0f:58:60:9d:ca:07:8c:61:22:
                    bb:61:ab:18:08:e1:61:2e:70:16:3f:a0:e8:4e:d9:
                    70:ff:6f:7d:f7:bf:fd:d2:e1:46:1f:3c:7e:a3:b5:
                    a3:c2:b4:07:e8:a1:db:e9:e1:08:ea:11:2d:05:da:
                    29:e8:2d:30:05:49:cf:18:83:53:13:ee:b9:a1:00:
                    7c:08:41:f1:87:56:5b:8f:d0:ed:1d:e1:70:83:ed:
                    27:3a:5f:4d:d9:2e:b6:f2:a4:cd:d7:4d:7c:4e:da:
                    1b:11:04:69:ef:15:61:35:6f:6b:24:08:84:0c:86:
                    ca:d9:59:fb:57:12:a5:e6:9b:a5:6c:a5:d5:53:10:
                    5a:ba:e6:1c:a9:68:95:f2:c8:32:8c:c8:5c:29:10:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:71:A4:47:BD:83:F8:2A:57:38:D8:B7:13:52:9E:5A:77:05:68:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:99:33:9d:d4:a3:80:9f:f8:bc:6a:e7:1c:92:b1:12:e9:f2:
         66:89:24:5e:b5:b9:71:3d:c9:aa:cf:36:f5:e0:57:10:99:a5:
         d0:7f:5f:90:27:a7:a7:1e:e5:62:08:25:7a:60:64:8d:32:93:
         1a:bb:42:68:e4:4b:89:59:78:7c:3a:52:22:d6:44:ad:7d:56:
         7d:01:1b:3d:55:a6:8c:20:0b:ac:e4:ca:68:a8:51:e3:76:38:
         b6:f7:f6:c4:85:68:2c:89:c1:01:dc:ef:72:25:99:e7:26:f1:
         c1:1c:32:a0:bf:d3:0d:2d:b4:2b:a1:14:86:db:fc:95:83:c5:
         a0:ac:c0:d8:a3:1e:49:88:7d:94:92:58:41:2d:e6:89:bd:49:
         9a:65:d5:e0:50:b9:18:b8:2a:e8:60:bf:a3:15:a0:dc:39:e0:
         a9:be:ae:48:b7:69:cb:29:0b:c1:42:b1:95:68:13:1d:c5:df:
         41:56:71:39:b5:d3:4e:72:55:3f:39:11:b5:1f:d0:0a:0a:c7:
         1b:56:76:e1:8a:f9:2b:4b:21:42:f8:9b:9f:3d:25:7d:29:31:
         cb:27:0c:ff:e8:da:06:01:ff:0e:b8:b2:46:6e:8f:a9:20:8f:
         c8:04:50:04:19:83:e3:eb:4a:59:e7:de:7e:09:c3:23:46:f0:
         50:df:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:08 2026 by rpki-client