Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e239d512-ed93-376d-815e-c304df84c2bf.roa
File:                     e239d512-ed93-376d-815e-c304df84c2bf.roa (raw, json)
Hash identifier:          Xe7e3eDW/+V+kGKmPgdQ6SqurDd8WZ3RA9Fdc8ZV4rY=
Subject key identifier:   D0:05:CF:D3:5A:75:6E:F8:97:02:5A:4A:B2:8F:43:A6:A7:AF:61:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8E8008D690BA62E9F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e239d512-ed93-376d-815e-c304df84c2bf.roa
Signing time:             Thu 23 Apr 2026 14:28:18 +0000
ROA not before:           Thu 23 Apr 2026 14:28:18 +0000
ROA not after:            Wed 22 Jul 2026 14:28:18 +0000
asID:                     396616
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8e:80:08:d6:90:ba:62:e9:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:18 2026 GMT
            Not After : Jul 22 14:28:18 2026 GMT
        Subject: CN=ed685f5a-bad6-4f1c-ab55-4737e05752e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:43:08:27:31:41:bf:e4:70:f4:f7:b7:1d:
                    a3:d8:21:fa:37:17:ee:0c:94:fe:bb:5f:59:ef:13:
                    56:6b:09:13:10:df:84:d4:1c:89:e4:ef:ce:02:a3:
                    34:10:28:be:d1:75:d2:52:16:75:a4:12:18:46:d1:
                    d1:61:29:44:55:96:3c:69:88:bd:67:40:be:7d:d2:
                    db:83:0d:b0:b4:7b:f1:09:9d:97:50:53:28:a1:6d:
                    0c:f3:b1:bf:1b:79:18:ec:3c:5b:00:69:48:04:a4:
                    0a:3d:15:de:e9:43:7d:79:7a:55:06:55:3f:88:89:
                    81:71:93:c9:f0:3d:8d:ed:7a:0c:c2:bd:b0:18:ce:
                    6d:05:bf:ab:e7:e5:c8:17:81:24:a3:95:11:42:c0:
                    f6:f8:63:8e:4a:dc:e1:d3:33:f7:d4:bd:a2:c1:6d:
                    d6:55:11:24:23:f8:1c:63:d7:f9:35:e6:c3:d2:0d:
                    92:64:fa:71:4c:ee:1f:db:3f:52:c5:cf:8f:46:31:
                    30:56:d2:d2:91:c2:53:d0:2b:c2:5d:a4:0d:67:5c:
                    d0:62:03:f6:d7:a2:0d:9f:61:ce:13:f4:35:76:db:
                    24:00:ae:4b:f2:41:08:e6:64:06:fa:0d:13:54:8c:
                    5f:23:05:40:9a:4a:66:9f:87:01:1a:95:a2:e9:eb:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:05:CF:D3:5A:75:6E:F8:97:02:5A:4A:B2:8F:43:A6:A7:AF:61:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e239d512-ed93-376d-815e-c304df84c2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:61:4c:10:b0:d9:9a:11:4d:91:e2:59:ed:a9:a3:68:ba:fd:
         93:2e:c0:67:f7:5e:19:9c:a8:91:08:67:12:e4:92:9a:2f:22:
         38:e9:c5:27:e5:29:d9:c9:3f:dd:36:91:33:31:39:61:fd:7e:
         20:fc:17:45:b1:dc:5d:70:13:21:c7:37:c4:7c:33:41:c2:76:
         bd:b4:eb:d2:a1:2d:d9:5e:73:6a:35:13:ad:4a:0f:18:20:de:
         cd:e2:8e:97:54:e4:3a:6c:eb:e3:71:d9:2c:e8:a8:69:f4:eb:
         50:ea:a4:33:17:ff:47:0c:11:22:83:02:72:e1:74:51:61:30:
         ae:d7:c8:fb:24:00:11:29:b6:46:7e:be:46:81:c3:7f:7d:e6:
         92:58:49:d7:1f:5b:36:0f:4f:c3:a2:68:1c:a5:3d:6e:f6:85:
         b1:6a:08:70:c2:bc:b1:aa:d7:9c:69:98:20:4e:e0:a6:df:e4:
         d8:c9:de:ad:2a:8b:1b:0c:87:96:93:e0:07:19:ae:e1:36:72:
         1b:e9:d2:bf:e5:86:c6:29:3b:46:86:5c:7e:6b:2f:18:0e:2e:
         ea:0e:fd:6a:2d:b2:3d:9b:75:23:35:59:67:19:da:d7:ae:26:
         ef:6d:31:27:14:b3:a9:08:d0:e0:bb:b5:55:06:2e:09:ca:79:
         c7:26:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:11 2026 by rpki-client