Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
File:                     844ff308-1930-3872-bc8c-12b8c0fd5864.roa (raw, json)
Hash identifier:          CA2PJzinGj5Y/BmEfpjySKNm0W+2k+7D+biujPkYmxw=
Subject key identifier:   05:7A:4E:BD:38:27:EC:C6:1A:1B:0D:EB:08:C8:9E:DB:C7:BE:7A:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202C6FE290E0077CA59180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     36621
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2c:6f:e2:90:e0:07:7c:a5:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=39429b1a-698b-4b33-a52a-21fd9c34ac07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:1b:6f:02:1a:5c:7e:89:a2:de:93:18:c3:
                    6c:be:0f:e6:33:67:72:85:57:38:97:15:8b:fb:ba:
                    d9:77:85:39:43:02:08:94:fa:82:c4:ef:7b:78:ea:
                    98:b6:99:9f:f4:18:7a:a5:83:54:6d:19:f4:33:48:
                    03:18:21:bc:89:86:c0:ed:6d:dd:ec:8f:f9:ec:0c:
                    cd:59:54:5d:3e:db:c7:ba:30:2d:fc:e5:fe:16:ea:
                    e5:14:b4:6d:34:e2:69:77:58:01:e1:50:6f:7c:1f:
                    c4:1e:10:7e:22:6b:10:33:c4:9c:63:14:1f:86:84:
                    31:b0:0a:e4:91:72:e0:da:5f:3b:0a:87:cc:c9:30:
                    5b:06:1a:88:87:dd:15:c8:05:6f:9b:19:b8:61:37:
                    79:7c:ec:a1:7f:6f:87:8a:85:c8:d9:ac:25:24:1e:
                    b1:10:67:01:34:93:9b:d2:b8:30:5c:ec:01:6d:dc:
                    05:73:48:ed:e0:60:de:dd:ff:85:83:5f:60:26:c7:
                    be:82:c9:c4:e1:5b:a0:44:d3:b5:1a:33:44:39:78:
                    5a:65:12:02:42:74:2d:3d:a4:ee:4a:a9:3e:4e:f2:
                    df:7d:69:24:aa:62:84:b5:a9:dc:da:da:b3:bd:8c:
                    ee:69:1a:b5:9d:50:d7:c6:ca:0d:45:1f:11:9b:a5:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:4E:BD:38:27:EC:C6:1A:1B:0D:EB:08:C8:9E:DB:C7:BE:7A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:65:64:d1:b8:2c:8f:07:77:f5:53:29:96:14:4d:45:67:
         2d:9f:33:30:7c:d6:08:b0:80:10:21:28:33:78:f7:9d:8e:43:
         97:9b:83:5f:fa:51:78:85:99:91:bf:fc:88:b7:64:3f:91:cd:
         29:76:df:d0:17:1d:46:6e:78:7c:af:f9:d4:ab:a3:71:50:b6:
         63:5b:54:ab:14:d9:64:a8:77:6c:32:04:9a:1c:77:c9:f8:cd:
         cd:c1:58:b9:37:4a:cf:e6:ad:03:f5:91:f6:10:59:63:c0:69:
         16:3e:ae:6b:57:63:67:2a:cc:9d:0f:fe:9b:f9:1b:15:d5:51:
         27:83:14:c4:a0:32:0f:05:db:29:b6:ff:0f:2f:fa:cc:05:dd:
         fb:1d:98:45:73:3f:4d:36:8c:dd:f6:10:30:d5:13:24:19:a4:
         12:b2:c0:5a:d4:2c:d3:ae:e0:1f:57:6f:8a:3e:23:62:31:32:
         7f:d5:3f:a8:86:b2:8f:05:cc:cf:d1:8e:ae:d3:ab:91:32:42:
         5f:fe:72:ae:14:3c:3b:e6:06:0d:e0:1b:1f:9c:99:e3:df:72:
         33:53:b3:6e:90:9f:df:d0:25:7b:f2:c1:cb:92:21:19:d6:20:
         c7:15:da:db:f9:e1:a9:2d:52:69:34:07:c6:46:d0:a9:d7:a4:
         dc:fe:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:45 2026 by rpki-client