Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6030594-3ee1-305c-be22-e5895645415a.roa
File:                     a6030594-3ee1-305c-be22-e5895645415a.roa (raw, json)
Hash identifier:          xxY6sA0FOZl60gaH1TeW5rpp3LZNXQ5p9Ixr0hsv+AQ=
Subject key identifier:   54:AB:8C:41:9F:D5:61:CA:1F:56:13:2A:DB:51:F4:72:A2:5A:16:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3AD2719E9F763F77EE6180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6030594-3ee1-305c-be22-e5895645415a.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     396561
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:d2:71:9e:9f:76:3f:77:ee:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0e9276c2-957c-41a7-9858-c8e3402b7e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:90:1f:87:f7:28:23:8d:20:44:9d:13:c1:
                    d3:0d:b2:5e:c8:c5:aa:66:0b:a0:3c:24:2e:d7:f8:
                    ed:e3:38:a0:b3:b5:68:b2:54:bf:0d:f3:63:0f:23:
                    5f:4a:28:56:0e:f5:20:49:77:64:6f:b0:03:83:e7:
                    c8:e0:b0:05:7f:b6:ef:1a:11:66:2f:d6:a4:2b:b6:
                    dc:9c:25:45:f1:92:31:82:4d:ef:58:04:b4:7d:db:
                    d2:e7:8d:e0:64:7d:0f:51:46:b4:e3:e2:4a:99:32:
                    af:f6:01:ef:81:66:56:5b:74:1d:1d:73:6b:58:b5:
                    c9:cd:2d:d4:14:4a:36:eb:45:38:8b:ae:84:b0:d0:
                    a7:dd:ea:56:ab:ce:31:7f:3d:25:9c:a1:b6:a6:48:
                    fa:e0:26:40:16:0c:25:ff:b3:25:a1:ec:2b:63:2f:
                    18:9a:93:c0:74:db:6b:d2:e4:45:4f:d1:e9:f7:0d:
                    20:14:05:00:4f:6e:96:72:bf:ae:53:bf:64:e2:46:
                    38:db:30:bb:29:0e:6f:d6:65:67:34:3b:e9:ba:4f:
                    6f:0e:ab:28:6b:2c:53:f9:23:53:ba:06:88:9c:4c:
                    90:42:91:9e:4a:aa:3f:a0:14:df:4c:b8:8e:cd:a4:
                    23:6e:cc:57:3c:e5:35:26:cd:23:aa:84:6e:62:a6:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:8C:41:9F:D5:61:CA:1F:56:13:2A:DB:51:F4:72:A2:5A:16:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6030594-3ee1-305c-be22-e5895645415a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:23:0a:49:3b:c0:49:ae:66:99:bf:fb:a2:24:f2:a2:c3:28:
         83:7e:d7:f7:0b:fd:71:fd:6c:71:60:bc:59:95:85:a4:90:a0:
         4b:d2:6e:ac:53:a8:f9:07:18:dd:1e:01:61:12:9a:f2:e7:7b:
         88:d6:cd:ee:ec:75:c9:83:1c:ed:f0:70:c4:f6:6d:3f:12:89:
         90:da:27:74:ec:48:99:af:70:5e:43:20:4f:4d:2c:14:3e:1c:
         4b:bc:75:b4:04:e1:86:8f:86:ae:b1:da:86:b3:71:03:b0:b9:
         4d:3f:79:c4:70:12:da:6e:d9:50:1c:4a:0c:e5:5e:b7:97:9e:
         46:88:9d:5c:f7:39:81:54:a6:42:b1:f9:5c:71:ff:d3:81:93:
         42:e5:9a:91:fa:52:b5:e5:99:10:37:cd:7f:ce:16:65:16:e8:
         19:57:e2:30:20:43:b8:5a:eb:9e:06:d4:24:16:bd:2e:d0:72:
         30:a5:ab:a6:45:7f:e0:82:47:59:ca:fb:b1:a7:99:ff:de:03:
         7f:12:8c:54:73:89:d8:50:3c:17:65:9d:1c:0c:6e:28:25:d3:
         cf:45:2b:85:d5:b5:f8:15:70:d1:f1:59:84:0b:c8:ae:74:9e:
         0d:98:de:9c:f8:e1:98:b6:e3:c1:a0:91:cf:de:20:bb:d9:3e:
         75:54:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:23 2026 by rpki-client