Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa
File:                     b7a39608-303f-33fc-a6e7-6db748feaa03.roa (raw, json)
Hash identifier:          UxUROfBnhwRRtmfGuxUSCIQaQgneb0HZAvH+Q8lEjfU=
Subject key identifier:   0E:19:F6:9A:1B:35:61:40:BB:B7:71:61:44:2A:AC:13:EF:D2:A8:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE04D07A4A0D8C535585880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     396564
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4d:07:a4:a0:d8:c5:35:58:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=ecf7dd43-c87a-4790-87ea-58ada567ddc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:f9:21:b3:d7:fa:b6:a6:a0:f1:c1:c4:67:
                    3f:a4:f0:0b:58:d0:3f:1c:cc:f5:9d:15:fa:35:a5:
                    48:a2:9f:d5:70:d8:88:43:c0:f1:51:6b:00:d4:f6:
                    a4:ca:65:60:5e:93:a9:5d:73:30:c5:83:ea:81:8d:
                    3d:8a:75:25:c5:94:d0:60:3e:bd:66:81:d8:80:1f:
                    fb:09:9b:d7:a4:76:af:2c:c1:47:b2:2e:c6:35:ef:
                    15:a7:b5:e7:59:34:55:9c:3a:2a:e0:b6:41:12:82:
                    2b:3a:d7:aa:c1:5d:f2:ec:92:42:d0:7d:7f:a7:73:
                    d5:47:c0:eb:b4:5a:b4:c4:6b:9b:1e:1e:e6:ca:8b:
                    81:14:f3:17:3e:58:ea:e8:4b:ff:6e:8f:af:42:79:
                    c9:45:b3:9f:6e:6d:c7:a8:0e:1f:a4:16:c6:f4:44:
                    f0:fc:3f:d4:98:63:6b:58:da:c5:0d:b9:2f:30:1b:
                    3d:5f:96:5a:82:e2:40:09:c6:85:40:86:46:4b:75:
                    13:57:c6:36:ca:33:d5:36:48:30:57:d1:98:bd:ab:
                    b4:88:a8:a1:3c:e0:2e:85:80:0b:cf:2f:2b:c7:7c:
                    39:74:2e:30:7f:6c:d4:cb:da:ad:d2:ef:7a:62:d7:
                    d6:79:d1:83:11:14:a6:b4:60:a2:15:e4:db:44:fa:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:F6:9A:1B:35:61:40:BB:B7:71:61:44:2A:AC:13:EF:D2:A8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7a39608-303f-33fc-a6e7-6db748feaa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:0e:9b:49:ce:d7:ae:5d:54:cd:3c:6f:78:2b:c4:ca:57:
         b1:b2:0d:97:36:e3:08:e6:b3:56:61:4a:81:85:5f:ee:b1:3c:
         e8:bb:54:f8:39:dd:b8:f5:7f:1f:87:c3:89:2b:9a:51:81:45:
         4b:c1:d4:0f:65:38:0e:c0:c8:0b:1a:cf:70:a6:a0:31:ac:ff:
         57:60:cd:06:32:eb:33:7d:18:2d:f3:8d:45:42:f7:98:0c:ba:
         82:21:53:b6:8c:31:f1:d2:9e:46:28:b5:d3:bf:a7:44:33:c4:
         b7:8f:20:d4:e6:ae:2b:16:23:2c:6a:3c:ac:1f:56:90:3d:a3:
         d2:d3:ec:35:6c:a2:05:cc:5c:bf:23:92:b7:6d:17:af:82:a4:
         23:d2:db:64:79:e6:f1:e6:9f:b1:50:6e:ff:15:85:16:97:5f:
         0e:fa:90:ca:7c:80:61:94:5e:9b:5e:bb:4e:c1:d0:e3:7b:0a:
         af:29:64:10:24:f3:0a:d8:da:7d:3e:50:64:a8:ab:54:0c:cf:
         9c:9b:ce:08:03:fc:ad:fc:07:4a:58:3d:e4:fb:2d:76:8b:5a:
         5f:78:89:83:be:ab:ac:98:8b:16:90:30:14:1e:0c:a2:af:a8:
         1b:59:3a:fa:82:36:7f:41:29:84:36:08:a3:a8:d5:83:7d:f9:
         a3:d0:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:32 2026 by rpki-client