Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
File:                     a29c63fa-621f-3158-9a75-f40261331223.roa (raw, json)
Hash identifier:          jkTYVr7+zyNcdBlhRO/yqCP7R05+B1yF3vZwntImaRo=
Subject key identifier:   3E:7C:27:76:7A:FB:FC:C8:C7:12:EB:94:64:BA:49:28:E9:77:60:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B854DAF0586291A64115000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     36629
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:4d:af:05:86:29:1a:64:11:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=eb3aa9d4-4c38-4c09-8f71-24f56a46a7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:73:dc:41:89:73:9e:fb:c5:f8:fa:9f:1a:
                    5c:4c:77:1a:7b:9b:db:bc:42:18:9e:38:cd:3e:59:
                    60:e5:1a:b4:2d:4c:e6:15:41:e2:8b:3e:77:08:fe:
                    70:0d:b9:74:7f:c1:1a:e1:14:84:9f:24:9b:7b:1b:
                    80:48:82:2f:43:bc:57:e3:6d:01:bf:b5:bb:d9:c2:
                    63:7b:00:71:cd:f1:eb:4b:86:5c:f9:05:d0:48:46:
                    d5:6a:82:79:51:27:15:25:f4:a0:96:e0:6a:0e:fc:
                    d2:0d:92:f9:0d:a9:ec:ca:3e:5b:aa:cb:e7:8b:63:
                    dd:46:77:53:88:d4:9f:4b:ba:7b:ab:55:52:c5:42:
                    f1:fe:c7:9f:99:43:29:81:76:a4:d3:63:1b:bc:4f:
                    31:33:c1:09:6c:fb:cb:35:0b:f4:01:36:fb:09:c5:
                    ab:d5:fb:34:6c:2f:05:8c:bf:9b:8a:15:70:5f:1f:
                    2c:c8:1b:4d:ae:69:9d:be:22:59:32:56:a1:99:c8:
                    4a:6e:42:73:41:ea:1a:f9:a8:13:25:a5:b3:62:c5:
                    cd:04:cb:a9:cc:66:8f:a6:c8:f6:54:f6:06:43:97:
                    9d:65:32:f8:e1:23:0d:ab:de:d0:b3:f1:d8:f1:fe:
                    10:2e:bc:4f:c3:2e:52:82:db:33:19:38:a7:90:4a:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:27:76:7A:FB:FC:C8:C7:12:EB:94:64:BA:49:28:E9:77:60:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:22:77:ff:83:a4:9e:54:42:c1:5f:c8:b1:d9:4c:01:7d:5d:
         8e:51:d1:a2:46:7f:c8:7d:1d:4a:35:fa:82:6c:c3:83:a9:79:
         76:3e:5b:a5:57:bb:27:d7:c0:c4:ad:8b:14:c6:fb:dc:4f:16:
         c3:95:12:cd:db:75:e3:3e:4d:54:74:5e:85:3e:f8:ec:5a:41:
         a9:61:48:5e:e4:bb:b0:36:db:84:57:99:de:ea:95:c1:c8:5a:
         8a:1b:22:26:dd:14:ce:a1:fa:e5:2d:13:f7:1b:7e:b2:34:2c:
         8c:9b:40:e4:69:f5:41:a0:70:81:11:50:cc:a3:3a:9a:ab:c4:
         a2:5c:72:70:8b:8f:73:e9:1b:12:e1:60:38:39:85:86:55:9b:
         af:08:93:0d:81:01:67:4f:91:e1:73:6f:a1:04:6b:bb:67:53:
         c5:b2:4d:57:69:a6:79:c2:d7:14:9f:15:df:f5:87:9d:ef:a9:
         cd:cf:d7:30:0b:e1:3b:34:6f:75:c7:a9:33:31:51:54:3f:ee:
         ce:06:4b:34:a0:71:e9:80:14:74:62:9f:11:fc:3c:a1:c0:dc:
         92:41:0a:c2:ad:12:f7:81:f2:ad:c4:ef:5f:00:ae:67:be:d6:
         71:fd:62:89:27:be:e1:cc:43:fe:2a:75:e6:60:f6:82:43:7b:
         de:40:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:17 2026 by rpki-client