Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9712e210-ed81-3eb1-879f-e7f6ebc024f5.roa
File:                     9712e210-ed81-3eb1-879f-e7f6ebc024f5.roa (raw, json)
Hash identifier:          du3NzRyK7T0H/iPK92O0U7/sJEcjA/B+Vmab0G4xhr0=
Subject key identifier:   39:CC:95:44:53:4A:27:DE:7F:C9:D3:C9:14:39:23:06:3E:FE:4C:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B8550AEA1095CA55A4EAF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9712e210-ed81-3eb1-879f-e7f6ebc024f5.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396543
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:50:ae:a1:09:5c:a5:5a:4e:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=5168d91d-e17e-4dfd-aaf0-ff457f1d8bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:04:ab:e6:56:f6:fe:65:98:35:c6:8c:60:
                    e4:bc:21:34:8a:44:90:dd:a0:de:19:33:fa:21:86:
                    91:d8:20:44:39:d4:81:96:0a:b3:00:91:97:5b:14:
                    68:7c:98:39:7d:6e:20:4c:a8:b0:e1:c8:51:ce:cc:
                    7c:82:c7:83:05:64:7d:56:ed:04:e4:db:db:a4:35:
                    d7:58:61:96:ed:79:9d:28:b6:f9:31:30:57:90:25:
                    f5:05:39:6e:57:c5:d8:5b:63:5b:4d:b5:c7:00:b0:
                    de:67:ea:17:8b:47:7b:ba:f7:2e:0b:82:2e:df:26:
                    ed:5e:46:d2:c6:34:ae:dd:61:13:79:c8:aa:54:c5:
                    99:a7:6c:3d:b7:8d:10:b1:92:eb:4a:42:55:5b:84:
                    d6:a5:8d:94:46:d9:39:1e:de:e7:fc:31:18:c5:67:
                    31:61:4e:cb:b8:51:aa:e4:e7:4a:7d:56:61:01:8c:
                    f8:d6:5c:05:50:a0:d1:2b:6c:9b:2a:07:69:f1:90:
                    6d:a7:d7:59:e2:5e:bf:63:cb:a7:8c:30:69:41:cc:
                    d4:3d:8d:32:c4:cf:ca:e6:6d:2b:b4:1c:e6:73:5c:
                    a3:79:e2:41:4e:be:d6:c7:b6:33:34:e0:f4:63:4f:
                    b9:40:47:c9:22:b0:b9:13:16:90:8e:bb:cf:5c:a6:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:95:44:53:4A:27:DE:7F:C9:D3:C9:14:39:23:06:3E:FE:4C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9712e210-ed81-3eb1-879f-e7f6ebc024f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:64:98:72:c2:81:53:b7:53:78:73:8e:48:04:1f:db:7a:59:
         d7:b4:74:24:48:1c:10:1e:94:6a:57:38:0b:cf:f2:f7:2f:9e:
         f4:98:47:77:73:ed:b1:c5:fc:05:5d:75:70:89:4f:e4:a2:24:
         49:36:71:74:c3:bf:a5:4f:f3:e6:89:ef:8c:36:7e:61:b6:97:
         29:cb:b5:49:cb:f9:b2:af:9f:d1:9f:b1:50:24:03:b1:db:34:
         90:52:66:4e:ea:78:a0:cb:00:d5:3b:81:b2:3a:7d:f3:bb:d7:
         bb:f3:7e:e8:35:42:5e:0d:63:61:a9:8a:70:9c:2f:b7:73:03:
         09:33:ef:18:17:90:69:f9:d4:fa:ba:33:f3:b5:4e:ec:5e:45:
         a4:90:10:85:49:83:75:2e:d7:57:fa:b4:f9:0e:4a:72:65:9f:
         be:ff:a5:50:df:77:fd:f4:44:ed:4f:77:6f:ff:06:44:12:41:
         d3:cb:cf:d8:14:88:9b:fd:d6:6f:40:f3:31:1c:2e:1d:ba:37:
         a8:4d:5b:d4:c4:b0:a4:e3:89:00:60:b1:45:fb:7f:98:03:b5:
         2d:db:bb:1f:68:ae:5e:5d:ff:c1:2d:23:9e:c9:f9:a7:ab:54:
         7e:d6:4f:49:03:f3:d8:1a:85:f6:83:5e:e4:55:5b:32:1f:40:
         a2:b4:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:45 2026 by rpki-client