Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/900111a0-b98c-3963-b851-94576bd76bde.roa
File:                     900111a0-b98c-3963-b851-94576bd76bde.roa (raw, json)
Hash identifier:          cF48WVmSat3TB6o5EWMOQtQbtFtiu/7oH5lAuV6aFV8=
Subject key identifier:   DC:7E:39:84:BE:AC:B7:C6:D8:2B:21:39:0B:09:1A:0C:0D:AC:DC:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE1EB1E34BF2A16D569C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/900111a0-b98c-3963-b851-94576bd76bde.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396552
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e1:eb:1e:34:bf:2a:16:d5:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=8da5215b-8e1a-4bb8-9147-7ac83c1d0bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:ab:80:c5:c8:0b:62:09:c1:05:62:1d:43:
                    68:72:9d:1d:40:9a:76:be:0b:97:05:14:e2:64:d5:
                    07:46:0a:68:68:25:be:d2:5b:1c:33:e5:45:07:b5:
                    01:04:8e:ff:00:d8:d2:03:a6:0c:85:81:9f:be:b7:
                    2c:28:55:9d:f1:33:97:7e:62:6b:de:b3:b6:b6:27:
                    b1:2d:ce:e5:b5:f3:78:85:28:04:ba:17:ec:67:02:
                    dc:7f:78:19:7a:54:a1:47:d3:34:5b:27:35:92:33:
                    d9:7c:c8:65:40:99:b5:4f:14:88:9a:0e:c7:31:7c:
                    4f:76:f0:3a:f8:e4:b6:8a:a3:90:5b:e9:5d:2d:00:
                    6e:fe:a6:b5:87:5c:5a:49:78:7c:ae:9b:3f:96:64:
                    ed:ee:59:17:6f:65:69:14:ba:7a:da:53:a6:6c:bc:
                    a8:33:0c:8d:83:76:33:cb:ea:c8:af:a3:b2:0a:96:
                    24:d1:00:ff:3b:e5:68:e8:7c:2e:f7:89:57:b8:24:
                    73:d4:eb:e3:70:ef:8b:32:84:85:36:ab:e4:1f:20:
                    ee:03:d6:1c:f8:22:48:d2:1a:6d:c8:02:0d:01:a9:
                    8d:5a:01:ca:12:2e:47:ef:78:bf:6b:07:80:ba:36:
                    b2:64:b0:c3:82:c2:5c:53:14:71:bb:0a:10:27:d6:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:39:84:BE:AC:B7:C6:D8:2B:21:39:0B:09:1A:0C:0D:AC:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/900111a0-b98c-3963-b851-94576bd76bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:e7:4b:05:44:eb:c8:92:83:8a:8d:24:f5:cb:64:9b:0a:
         14:e3:3c:41:54:3c:a4:21:c6:bd:a3:cc:6d:0f:de:1f:2b:86:
         8f:94:7f:ab:96:f0:bf:b4:5a:42:94:50:39:9d:72:a8:2e:a5:
         2c:55:20:dc:1e:78:78:e2:25:27:04:79:4c:92:2c:17:8a:3a:
         75:2e:2b:83:23:ca:f1:5b:d5:cc:9b:13:35:79:2a:2a:0e:2f:
         dd:03:92:e8:e0:ab:44:3b:42:b9:3e:a5:85:6a:6d:4f:f1:52:
         57:a7:7a:4f:87:f7:ad:dc:77:c2:20:f8:30:43:74:ba:51:b7:
         64:3f:dc:f9:ff:3f:43:64:99:77:28:00:34:27:96:41:5b:1f:
         0e:42:69:84:39:34:07:a1:8a:bd:a2:65:71:c7:1e:26:57:c1:
         76:b2:cf:b8:58:dc:c1:47:d6:f0:1d:0f:af:b3:ba:71:65:30:
         dd:9f:95:04:63:dd:25:fd:4c:92:4d:a9:68:80:04:f6:a3:d9:
         06:f5:15:85:c0:6a:55:cb:31:d5:2b:d2:3c:b1:8c:19:8f:88:
         04:0e:2f:5a:91:39:a5:4c:5a:6b:53:0c:dc:e3:74:ee:d3:1a:
         86:70:fa:be:ee:2a:fe:7c:51:69:b9:13:49:31:5d:45:53:21:
         35:5c:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:59 2026 by rpki-client