Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa
File:                     db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa (raw, json)
Hash identifier:          /416PR2/+M32ax6wUF2GEZDwhh8vGgbyxR6cFiWxjB0=
Subject key identifier:   18:F0:1D:7D:0F:B6:00:48:1E:D6:A9:EF:95:33:FC:96:71:5F:51:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202B59C45117769664AB10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     36627
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2b:59:c4:51:17:76:96:64:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=b650d910-8a71-42e3-a8bc-178d71b1a184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:34:de:c6:67:d5:63:f6:ba:08:8d:4a:2a:
                    e8:9e:98:bf:da:6d:40:c6:1e:17:0d:bf:3a:3e:a1:
                    bd:ec:b2:c0:46:eb:43:b2:10:99:ff:1a:29:85:a9:
                    06:30:03:8c:7d:9d:3b:67:4b:f5:a8:cf:a0:67:2c:
                    dc:9f:6e:59:e1:78:97:b7:33:84:f1:3b:b7:1d:20:
                    91:91:80:8f:83:ac:a7:6f:1e:94:b4:7d:13:27:9f:
                    66:bb:3f:d3:5b:b2:0b:e2:34:3f:23:3b:4f:de:ee:
                    f5:51:2c:09:e4:3d:b9:4b:53:0e:47:a5:63:81:ee:
                    57:51:cb:3c:fd:b4:95:95:9d:76:96:78:f1:1d:15:
                    59:4d:97:df:ff:b8:be:18:89:b9:46:48:ee:98:b7:
                    31:f6:a2:0c:9f:92:fc:13:70:ca:2b:7a:75:57:e2:
                    59:39:45:a0:2e:d0:85:67:08:5b:27:2a:e9:9c:2b:
                    cd:40:32:75:d3:24:6e:0c:f1:71:41:75:a5:25:e0:
                    d8:f1:05:4e:b0:da:72:4e:05:0b:b3:d6:03:ac:0b:
                    dc:31:f6:df:7d:7a:0d:37:6d:94:8d:ff:ba:1b:04:
                    37:48:d9:62:d1:c1:5b:45:0a:51:07:92:f2:fd:33:
                    b4:eb:c4:6a:fa:5e:2c:ae:46:29:a9:23:2d:74:2e:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:1D:7D:0F:B6:00:48:1E:D6:A9:EF:95:33:FC:96:71:5F:51:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8c:07:97:4c:54:c2:53:27:1b:a5:e6:aa:e3:83:bc:48:37:
         69:d9:70:2f:de:30:84:a4:3e:d5:86:d9:2e:c4:1a:1f:8f:dc:
         d3:78:22:22:b2:82:7a:70:d4:23:ce:52:26:d9:3f:71:d6:50:
         a0:1e:0d:e3:bc:bf:2c:b1:41:86:36:7f:20:44:e9:0f:68:c1:
         63:a6:d9:50:27:aa:24:a5:94:a7:87:86:70:c5:f5:65:52:9e:
         b3:04:5f:b9:73:68:92:38:2d:a8:ca:64:e9:21:81:c6:7c:86:
         7f:0a:65:08:7f:28:4a:8d:4d:c6:1f:3b:b0:67:fd:09:25:f9:
         9d:70:0f:17:67:a4:c1:3a:74:da:81:04:f6:d1:09:04:2b:1f:
         f8:3e:25:52:4d:89:f0:e1:45:df:03:1a:f4:1e:04:81:c5:bd:
         09:ab:60:13:c0:55:31:a3:5a:a2:f0:86:6f:77:81:9c:a4:92:
         1b:7e:e0:a2:95:18:0c:4a:63:8e:a0:f6:0c:06:6f:b8:b3:e0:
         3a:0c:01:52:37:6c:c8:c0:41:04:3d:20:45:57:23:cf:1f:cb:
         75:0d:a8:5b:93:be:62:3c:37:91:f8:d0:d3:50:01:36:5f:09:
         b6:92:9e:88:05:e5:00:9a:6f:90:2a:d2:4c:46:f6:28:cb:a3:
         3a:87:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:58 2026 by rpki-client