Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa
File:                     9982cb35-3167-378a-a759-66a9420535b2.roa (raw, json)
Hash identifier:          4+N7QR8uomF6HevowacXuE5GGrfXNhlwDZ9hD7JLcro=
Subject key identifier:   B2:49:F3:10:7E:74:AE:52:13:D8:2A:DA:27:0A:37:65:EA:B7:50:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D932557BD482F9EA52DC73D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     397203
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:57:bd:48:2f:9e:a5:2d:c7:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=eb711dc2-37fe-42b1-ad4d-02c286cdd5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:45:11:47:1a:05:31:46:02:ac:d8:cd:ba:
                    c8:80:68:ed:b5:55:c6:eb:ca:d1:a0:30:d8:15:c5:
                    86:c8:25:74:f3:1a:f8:dd:91:f5:2c:17:ca:54:a4:
                    fb:75:dc:42:ce:4e:c4:3e:5f:6b:2d:89:49:20:e3:
                    26:82:ea:2f:e0:bd:dd:4f:e4:8a:a8:5c:9b:15:31:
                    00:1d:4c:c8:24:d3:ed:d5:ff:75:0c:a2:00:67:2a:
                    06:7a:fd:14:68:94:9c:9f:52:a1:34:85:b1:67:7b:
                    6e:90:ba:d4:5b:eb:a6:4c:23:92:6d:e5:a8:27:1f:
                    11:f2:06:48:54:de:e2:3a:0e:59:ce:72:58:b1:36:
                    97:e2:e5:c3:1d:4b:a0:6a:a7:d6:fe:8d:32:84:4f:
                    a6:6e:8a:b3:af:c3:63:38:8a:9b:3c:9f:ae:06:04:
                    32:ba:88:53:50:02:97:96:0d:e2:e1:e6:e6:c6:61:
                    c6:4f:2e:e3:4a:ff:40:27:11:6d:9a:23:08:44:59:
                    38:50:0a:96:6c:05:5e:ff:50:85:69:f7:e8:e6:df:
                    b3:94:88:83:f6:da:0e:5d:fe:29:5e:ad:12:06:08:
                    bf:fc:a8:dd:74:9a:89:7c:1b:b9:2c:26:dc:86:68:
                    24:28:ca:86:81:f6:8b:60:e9:18:0f:ea:6e:2d:3f:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:F3:10:7E:74:AE:52:13:D8:2A:DA:27:0A:37:65:EA:B7:50:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:6c:4a:d8:2e:d1:22:71:e7:7d:20:b2:5a:a3:86:41:78:
         5b:f8:29:07:15:bc:00:93:fb:ac:9b:04:38:fa:c9:24:7a:df:
         89:27:34:77:95:ed:d2:53:58:83:d2:5d:e7:2c:a6:f7:b6:dc:
         8e:b1:5c:96:a8:c6:c1:ad:a4:fb:44:a5:88:94:4f:6e:c9:fa:
         fe:ef:29:01:65:d7:bc:c2:ff:94:ee:55:e9:f5:ea:1c:3e:bb:
         93:1c:3e:0c:2c:a8:33:a9:6d:02:f9:d8:a1:f7:b6:d6:12:64:
         76:d0:ae:2f:cf:85:89:c6:ee:df:e5:7b:6a:c4:a8:55:55:7f:
         c2:67:20:5d:b0:ae:66:7d:17:a7:54:35:c4:3d:c5:80:f4:46:
         75:51:a1:ee:df:d0:5e:36:c3:f9:b0:b9:41:af:68:22:af:7e:
         16:d2:c8:4c:46:20:cd:1e:51:bd:72:8a:60:a6:7a:50:9c:0d:
         26:fc:4f:5a:ea:5e:b7:fe:d9:ad:f4:2d:20:e8:fd:29:17:23:
         94:7c:86:60:e4:32:dc:08:99:e0:ad:f4:e6:12:47:e4:46:31:
         b6:b4:53:90:1c:07:17:70:b1:60:da:90:ff:e9:05:a3:d0:ef:
         32:1a:2d:ba:72:ab:91:a8:ac:39:2f:85:9c:1a:35:5a:61:e9:
         ac:5b:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:39:04 2026 by rpki-client