Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
File:                     b3230797-9752-3a16-a896-808d3a6c520b.roa (raw, json)
Hash identifier:          Ez1Y1AsYsITUdu0nWdTgQS/WQlI1ux0xyjwlR+fY5ok=
Subject key identifier:   B6:E0:04:68:50:52:8B:97:2D:57:BD:67:00:97:BE:EA:8A:05:8D:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556B68F1F5280ABBB71C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     20362
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6b:68:f1:f5:28:0a:bb:b7:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=4c55ad28-f5c9-42ab-bdcf-392c423422ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:1d:0b:89:ca:c2:ee:3e:d8:60:06:7b:ee:
                    aa:9e:14:5d:c0:01:96:1d:06:20:20:13:9d:20:63:
                    f2:b1:81:8e:19:79:95:83:8c:a3:04:f8:6c:47:30:
                    69:0a:1a:00:ef:b2:58:be:87:97:7d:33:3d:cc:05:
                    0c:3c:60:c0:a4:c8:70:c7:c3:05:8a:48:d0:bf:a0:
                    2e:58:27:bc:fa:b4:bb:d0:81:ff:12:7c:8b:31:78:
                    d2:c2:bd:ca:cb:df:88:f2:2f:01:81:00:f7:6e:c0:
                    ae:5d:4e:38:39:3a:3a:d9:4e:c3:f9:a8:52:0a:d6:
                    85:61:18:2b:9b:c5:e9:dd:5d:16:92:1e:61:3c:d6:
                    1d:01:7f:d1:d0:9e:68:27:c0:df:70:36:4c:0f:7d:
                    2b:56:ee:bb:b2:e4:13:2c:21:c3:31:75:c7:f0:39:
                    87:26:be:e2:ac:49:80:8c:dc:ae:af:01:5d:9e:42:
                    33:6e:29:e5:e8:ac:5d:80:3a:c2:1d:e7:3d:c2:25:
                    a6:d3:4e:c5:a4:5e:e2:de:08:90:4f:3b:a7:cb:42:
                    18:d6:d1:7d:49:53:dc:8c:14:98:58:d4:82:4e:37:
                    08:cb:a5:0d:78:93:16:c5:7d:b9:9c:85:f9:d8:d8:
                    be:37:20:40:15:cd:fd:e2:2f:ac:9a:2c:d7:21:01:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:04:68:50:52:8B:97:2D:57:BD:67:00:97:BE:EA:8A:05:8D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:d9:11:81:6b:20:7b:79:57:3f:c0:30:21:34:5c:5c:da:
         5c:1f:fd:f9:28:8e:74:7b:90:db:08:1d:e2:1d:77:fd:70:c6:
         51:59:d8:2e:4c:8b:6b:40:79:57:c2:19:09:1c:96:3c:e2:00:
         01:3b:31:9d:45:da:d6:09:40:dd:6d:1a:06:ac:33:69:cc:76:
         09:16:f9:b0:04:b1:0f:a5:94:df:69:84:12:85:31:00:de:78:
         68:8c:45:bc:58:77:7c:0b:d2:23:68:5d:c9:8b:19:22:71:2c:
         c4:a4:7d:61:e3:d3:9b:b4:1e:58:8f:37:28:1c:80:3f:4a:26:
         f5:ed:fc:ca:3e:27:35:6a:99:a8:2b:37:b7:25:68:62:96:d7:
         2d:54:a7:82:62:3c:b3:b0:bc:73:59:3d:94:9f:42:f1:c9:e3:
         5f:b0:78:67:51:74:24:52:19:f8:e3:1c:66:93:da:5d:f6:78:
         71:19:a9:ee:28:b3:bb:76:c8:ae:7c:92:50:d7:e2:26:fc:c9:
         f5:67:97:7f:88:f7:a9:f4:a5:f0:23:93:c5:f7:41:1f:4d:f5:
         45:3b:3a:80:fa:8a:f3:3b:9a:02:32:37:15:b2:02:a5:8a:20:
         58:05:22:75:54:74:63:5c:e9:ad:b0:d8:a6:a1:c4:b8:d0:35:
         c8:20:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:00 2026 by rpki-client