Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e71273ab-f71b-3572-bc74-d0ff7cd0bbbd.roa
File:                     e71273ab-f71b-3572-bc74-d0ff7cd0bbbd.roa (raw, json)
Hash identifier:          N8ueMRTI+DMELgK1LaXaPNaLRgBjrnFnV5B2FHsNjl0=
Subject key identifier:   C6:D5:A5:15:2F:F1:8E:6E:72:D9:B5:91:1B:B5:91:A9:73:94:2F:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DADCEFB943EA71CB8BCA89FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e71273ab-f71b-3572-bc74-d0ff7cd0bbbd.roa
Signing time:             Thu 30 Apr 2026 14:13:28 +0000
ROA not before:           Thu 30 Apr 2026 14:13:28 +0000
ROA not after:            Wed 29 Jul 2026 14:13:28 +0000
asID:                     397206
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:ce:fb:94:3e:a7:1c:b8:bc:a8:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 14:13:28 2026 GMT
            Not After : Jul 29 14:13:28 2026 GMT
        Subject: CN=dfe52b8e-16db-4359-8622-e8c920a5b68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:11:02:c9:84:50:18:58:90:17:eb:d4:8c:
                    8f:a2:1f:22:67:6e:26:76:74:69:5e:d3:73:37:4a:
                    5d:b0:c1:3a:30:25:b7:85:68:99:92:c5:d5:4d:43:
                    66:d7:e5:5a:86:c3:5f:37:b8:16:97:e6:24:70:f1:
                    08:de:06:39:ff:4a:4a:45:39:1f:49:a6:f6:28:68:
                    ab:ab:73:e1:65:b9:e1:59:c9:00:df:ba:f8:4d:4e:
                    e2:e2:8a:5e:db:fc:66:8e:45:71:6e:8b:2b:06:b6:
                    63:87:da:68:9e:58:a3:e8:03:2c:d4:64:62:61:55:
                    9e:e5:b3:04:f1:85:7a:f0:79:2b:fe:8f:e9:59:38:
                    13:c2:17:fb:b6:05:0a:ff:91:56:a8:29:aa:68:40:
                    44:6a:62:6f:93:53:30:9d:80:27:da:5c:d9:20:1d:
                    8e:07:3d:7a:85:7d:c3:08:71:20:c0:10:6f:02:e4:
                    07:58:57:d1:8c:92:38:40:4f:84:24:9d:2f:79:f7:
                    e1:62:02:5f:4b:26:24:8d:ef:05:f8:8b:a5:9e:2b:
                    c8:cb:da:ad:18:d9:80:e7:27:be:1e:a3:d1:ec:e7:
                    8e:76:a0:d8:6b:84:d8:c6:61:8b:5b:be:e9:3d:95:
                    ba:fe:20:39:86:5b:f4:cc:67:60:e9:20:42:e5:2b:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D5:A5:15:2F:F1:8E:6E:72:D9:B5:91:1B:B5:91:A9:73:94:2F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e71273ab-f71b-3572-bc74-d0ff7cd0bbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:15:90:05:6b:0b:6b:76:1f:92:84:c7:c4:ab:b3:80:c5:
         fa:96:fb:f8:08:ee:0a:f1:3a:73:61:42:5c:5c:b5:be:25:77:
         af:98:7f:f8:08:9e:c9:4b:68:69:85:74:db:98:81:ef:ff:6d:
         d6:1c:9f:72:cc:a7:21:15:b8:cd:35:44:3d:5c:99:ee:ab:ee:
         08:88:7d:55:5b:00:7a:96:1f:7a:66:e4:0d:7d:07:3b:75:ea:
         9a:57:14:2a:6a:55:3a:26:b2:f1:81:b6:f7:3f:15:0c:97:a9:
         67:73:54:8e:bc:15:10:53:3a:17:01:88:41:87:e6:19:e1:6e:
         5d:ae:82:97:09:a5:0e:9e:30:ba:a9:11:89:35:ca:01:69:59:
         11:af:dd:e4:c0:f7:22:d0:7a:da:0a:1a:53:5b:93:b2:12:fa:
         e7:b5:d8:d6:46:fd:da:b4:82:c4:f3:df:ac:7e:5e:1e:34:75:
         05:4c:2f:3a:ec:87:7c:a9:2b:aa:74:4c:fa:1b:e1:b2:27:09:
         87:eb:fd:83:b8:64:31:97:6e:15:34:e5:20:65:85:fb:94:95:
         9d:9a:c1:53:fc:67:7e:fd:5e:5c:f8:66:86:f5:b4:ae:e4:62:
         e2:78:3d:96:2b:f9:9d:51:8e:0a:06:e8:63:1b:3d:7b:11:85:
         b6:e3:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:08 2026 by rpki-client