Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1ec8839-7a4e-3e81-be3f-aba2d26c061a.roa
File:                     b1ec8839-7a4e-3e81-be3f-aba2d26c061a.roa (raw, json)
Hash identifier:          FTNmdGPCLwznK/vm7balUoaOK5ueQKaFDTvfW9KbCKU=
Subject key identifier:   AB:A9:98:11:8A:E6:9D:74:C7:52:D6:99:CE:1F:37:EA:A8:01:DE:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE468A94DF090BD7B3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1ec8839-7a4e-3e81-be3f-aba2d26c061a.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396574
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:68:a9:4d:f0:90:bd:7b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=36c95ab0-4fcb-43b7-ae58-a4b265a93b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:ee:89:98:da:e7:7e:e7:3a:03:6c:a8:c3:
                    06:49:cb:80:7f:44:4f:3b:51:d8:b4:f0:f8:b8:4a:
                    0c:dd:43:89:d1:00:a1:4a:41:69:7b:e8:ae:cd:3b:
                    51:d7:2c:2c:89:48:49:3b:e4:3a:76:f2:3d:00:19:
                    66:86:14:03:3b:dc:e8:97:7d:73:a8:83:c0:eb:fc:
                    a7:e2:af:67:13:b6:00:ae:be:d9:65:53:eb:cb:8b:
                    4f:9c:54:a1:1b:93:96:b3:31:b8:74:00:48:f3:ee:
                    ac:3a:07:87:df:4e:30:78:97:12:9a:c3:b6:ea:f7:
                    4c:f4:b0:e9:4f:4c:46:50:3a:32:a7:cb:2b:16:c8:
                    19:83:e6:b5:46:38:a3:23:02:de:5b:ee:da:1d:c7:
                    55:a5:41:e4:bd:e0:3f:21:91:a2:c1:56:af:8d:54:
                    44:82:68:73:a7:af:bd:67:61:90:5f:69:88:86:58:
                    bf:21:4f:e7:d8:82:43:51:ed:d2:54:e5:af:fa:02:
                    85:26:7a:58:6b:e9:d1:24:57:d5:74:8a:75:c1:75:
                    f0:39:89:c3:5c:82:1a:4e:bf:5b:47:34:41:de:22:
                    80:a7:ac:01:22:23:2d:6a:72:b1:2b:27:90:ee:06:
                    f8:df:25:bf:02:30:f5:1f:fd:ba:3c:ae:c6:38:42:
                    34:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:98:11:8A:E6:9D:74:C7:52:D6:99:CE:1F:37:EA:A8:01:DE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1ec8839-7a4e-3e81-be3f-aba2d26c061a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:8c:53:81:3d:b8:b9:6f:bc:c2:37:3a:58:09:7b:0f:90:
         8e:64:89:5e:15:0f:78:d0:86:89:3f:b6:b6:ae:34:4a:67:e6:
         06:eb:b9:ac:63:15:e3:d8:97:eb:57:28:ba:94:44:0c:1f:2e:
         a9:ae:7b:ac:1a:85:e5:0f:e9:b2:ec:f2:52:f6:dc:cf:c0:f9:
         88:ff:d9:17:4f:df:a0:31:c3:65:0b:11:87:be:8f:b7:59:db:
         e5:a0:da:5a:7a:e6:87:e3:38:7a:d8:bd:24:f9:1a:3c:08:fd:
         a0:ea:13:88:be:e6:94:56:df:81:ae:c1:d0:7d:4c:10:05:8e:
         35:9b:5d:09:d8:95:8b:84:83:da:1f:01:25:1e:7b:08:f8:5b:
         06:cb:5b:88:63:4d:9f:b7:63:0f:ed:27:22:bc:21:30:f2:fc:
         ee:1c:ed:ae:cf:ca:1d:ca:d1:36:d2:35:72:a7:9c:12:48:da:
         b2:d4:0c:69:a2:20:c9:6f:ec:0a:f2:cc:44:c8:ba:31:e0:eb:
         5e:25:58:dc:b0:1c:09:55:2c:0d:f9:50:06:88:b9:fe:1b:5a:
         d3:c8:f7:e6:05:30:20:4d:3a:e1:f6:b6:f9:06:09:8f:41:15:
         ce:31:70:f7:28:a1:2e:50:26:b8:8c:02:ce:89:25:a6:ea:55:
         79:62:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:40 2026 by rpki-client