Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0507d8b-0e3e-30fa-85b4-0e11017de2dd.roa
File:                     a0507d8b-0e3e-30fa-85b4-0e11017de2dd.roa (raw, json)
Hash identifier:          4zrIepLn8t5+L4yjrkmjmsxwrqwFL793i6tJiPalpxw=
Subject key identifier:   CC:FF:4C:F8:D1:29:BA:96:4C:AD:17:B9:CE:27:B6:73:90:FC:E8:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DADCEFAE0CEFA902CCD8A8F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0507d8b-0e3e-30fa-85b4-0e11017de2dd.roa
Signing time:             Thu 30 Apr 2026 14:13:28 +0000
ROA not before:           Thu 30 Apr 2026 14:13:28 +0000
ROA not after:            Wed 29 Jul 2026 14:13:28 +0000
asID:                     397198
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:ce:fa:e0:ce:fa:90:2c:cd:8a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 14:13:28 2026 GMT
            Not After : Jul 29 14:13:28 2026 GMT
        Subject: CN=c5782edb-15e8-4873-a9c7-c5133ab09c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:95:76:3e:ce:fb:ba:a0:71:71:47:dc:d1:
                    7f:56:08:73:bf:e7:97:2d:19:03:47:92:c9:af:74:
                    09:00:65:86:43:fc:c7:ee:c1:44:af:b6:ec:aa:c6:
                    e5:e0:51:bb:f4:06:ea:34:d5:1d:00:da:4e:45:12:
                    cc:6b:53:18:88:61:51:6b:32:84:8b:c8:fe:9b:3e:
                    ce:40:fc:f5:40:ea:67:f9:a7:89:6e:76:0c:02:ed:
                    0b:8f:ac:11:3b:04:a2:d3:7f:91:5f:ff:dd:cd:4e:
                    6d:26:da:a7:3f:af:51:f7:c1:dc:7e:b0:9b:3e:bf:
                    49:4a:ed:bc:3a:1b:15:61:04:10:8e:15:63:fa:dc:
                    41:02:7b:f3:bf:74:a1:8d:63:d3:5e:4a:8e:ad:2d:
                    3a:2c:79:0d:fb:42:8b:b6:f4:21:fb:3a:fe:da:a6:
                    ba:ad:e3:1c:f7:8e:30:1e:9b:29:0e:69:03:2a:0a:
                    bf:7e:87:53:6a:19:1a:09:ae:65:a0:c8:68:a8:7c:
                    6c:3a:f1:41:2f:51:7c:20:e6:a1:ae:1e:68:44:1e:
                    ad:55:3a:73:5c:a5:91:28:34:db:70:a5:79:fc:90:
                    0c:e6:f3:8f:07:5a:cb:c8:66:e8:10:01:65:9d:2e:
                    c4:92:e3:3e:d8:38:e2:d9:84:80:e7:17:54:22:e6:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:4C:F8:D1:29:BA:96:4C:AD:17:B9:CE:27:B6:73:90:FC:E8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0507d8b-0e3e-30fa-85b4-0e11017de2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:e6:3e:f6:d6:ee:3e:cf:c6:35:96:a2:3a:f9:16:bb:05:
         09:56:13:00:8b:06:14:b0:ab:06:8a:f8:4c:4f:94:b4:76:f3:
         11:d2:7d:b0:6e:ed:c0:eb:c1:9b:57:3b:ae:98:ca:a8:10:8d:
         26:2f:00:5e:4a:31:a5:c8:a8:b0:83:a9:dd:ae:a6:fd:a8:dd:
         56:d2:94:6c:2b:69:59:74:71:9d:d4:a3:b4:bc:75:ca:3a:84:
         25:77:dd:97:ca:72:e8:49:92:f4:38:22:ff:69:e2:85:0b:ee:
         9b:a3:6e:ee:1c:83:23:4d:17:fc:4b:78:14:47:df:2e:74:65:
         40:11:7a:25:77:16:bc:bc:5c:42:57:f8:a2:bc:6a:fe:7f:b4:
         5d:1b:cc:ea:7a:74:a4:f8:89:43:ad:48:ef:32:84:49:be:ef:
         0b:7e:88:a4:21:de:60:90:62:48:14:dc:40:52:7b:c8:2f:bb:
         7e:a7:1f:6d:34:d4:c3:49:cc:cf:62:11:62:f8:6f:4c:9e:8f:
         ad:1c:5e:c0:0f:e9:28:a2:f1:0f:49:db:0e:16:a4:48:a6:2e:
         34:43:8a:dc:12:95:bc:a3:7c:1e:da:40:53:78:02:2e:d8:b0:
         44:07:5a:cb:67:e7:4a:1d:bd:83:f7:0b:55:cf:e2:69:bc:60:
         70:fb:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:00 2026 by rpki-client