Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa
File:                     c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa (raw, json)
Hash identifier:          vZOJVAe1W3KvOrsE0DIl6qI44P39nE1vR06uCPwxzLE=
Subject key identifier:   4A:5C:D5:3A:40:E7:25:5D:4E:2A:79:43:6C:81:89:67:D6:A1:B7:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE3A129B0CA783AC20D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396589
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e3:a1:29:b0:ca:78:3a:c2:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=b6d47e9b-8a9a-43f8-928f-4f8324be0a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:81:4d:f5:a3:ef:ad:cb:68:17:3b:36:1f:
                    96:cc:3c:85:de:a0:c0:d0:17:df:5c:e0:1c:47:93:
                    ef:41:d8:71:12:ad:78:01:a8:44:07:d8:e4:3f:ab:
                    83:40:7c:1b:59:ca:6d:40:aa:21:57:3f:07:7a:a4:
                    82:ad:1b:ce:9e:f8:e5:93:a6:fe:ba:17:98:55:3a:
                    3d:4e:fd:cd:d5:7e:51:84:06:d4:a9:ea:32:ca:3a:
                    4f:b3:85:c7:bf:6d:40:a8:46:44:86:e7:ba:f9:02:
                    00:04:d9:2d:c7:91:30:7c:8c:d7:7a:7a:ab:c2:8a:
                    a1:c4:2a:38:86:f4:05:45:f6:b3:7e:9b:39:dd:da:
                    6b:b1:6e:ca:a1:6e:44:d8:c7:d8:c8:fc:78:87:b4:
                    29:86:ea:21:e3:66:04:b6:ff:06:4b:a2:6b:3d:43:
                    11:43:14:71:8c:03:78:0b:70:4f:b0:cb:16:e0:f6:
                    07:a1:79:3d:be:3c:9c:39:01:11:3d:d3:5c:01:c1:
                    d4:ab:56:f2:4f:e2:88:76:15:3b:47:b9:d4:d7:fb:
                    5c:33:d2:63:12:89:6e:85:a3:5e:64:f9:75:76:fd:
                    cc:5a:db:18:92:94:91:ec:ba:b3:a2:a0:29:84:e4:
                    33:6e:db:b2:c7:17:2d:35:12:02:4c:5c:a0:c8:4e:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:D5:3A:40:E7:25:5D:4E:2A:79:43:6C:81:89:67:D6:A1:B7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:39:3f:59:b6:37:d4:db:94:ac:0b:1c:c4:3f:f5:6a:2d:
         3f:12:29:29:15:e7:be:46:19:79:6e:9d:23:e9:31:f9:e8:67:
         6c:96:1c:ee:86:17:ca:32:76:88:2d:69:d2:e9:fd:2d:13:cf:
         30:4c:de:c8:16:6f:fd:ae:bd:73:1b:32:60:57:e6:3e:59:b4:
         bd:6d:3f:9c:23:04:c1:2e:bf:52:5e:01:a0:03:63:02:da:f0:
         59:09:9e:72:fa:8b:af:d3:12:3d:eb:54:67:5b:d3:b1:25:2e:
         eb:3a:bf:6e:44:2a:22:76:89:8f:b1:e8:68:b2:d3:01:df:21:
         01:96:af:21:5e:ca:17:f5:b7:5d:bc:41:4b:1e:33:b7:28:f9:
         e5:8a:77:a6:fc:c7:65:74:88:a6:37:e0:01:69:1f:bb:32:47:
         e6:64:cd:8b:bb:8c:4e:8d:20:91:7b:da:d7:8f:ae:b3:db:fb:
         bc:d9:e9:22:55:2a:0f:a6:10:e1:30:bd:44:1b:24:4f:af:94:
         1e:2b:f0:5f:5b:84:3f:f5:5a:d4:94:a8:9a:8f:93:a2:59:28:
         f3:8a:c6:fe:7b:a2:e3:72:19:0d:25:9a:55:a0:d9:5b:00:9c:
         a7:f5:f0:70:76:18:50:7f:fc:78:71:18:ce:97:be:d9:c2:16:
         95:da:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:05 2026 by rpki-client