Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8abbe10-deb5-3566-bb4f-06022f486344.roa
File:                     e8abbe10-deb5-3566-bb4f-06022f486344.roa (raw, json)
Hash identifier:          +/jZuHo1WWPf4bTA8TK8eN9IsrrQ4M8pyzdTQAhzWzk=
Subject key identifier:   98:84:92:C2:DA:96:8C:F8:06:A6:95:32:6E:2C:11:CF:D8:22:F7:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A2028602320F854324A7980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8abbe10-deb5-3566-bb4f-06022f486344.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     25485
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:28:60:23:20:f8:54:32:4a:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=198d290b-0d78-4e71-9444-12859453cf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:8d:6e:79:69:07:7a:b6:c8:5e:bf:a4:0d:
                    8d:fb:c1:92:6d:90:51:10:37:50:6d:a3:d2:f7:37:
                    54:01:a2:11:35:71:07:ef:30:b0:01:95:4c:1b:f7:
                    5c:a7:dc:e7:0c:99:c2:2c:f4:33:42:96:ec:ee:1e:
                    8a:a0:c8:d2:c5:8b:35:0c:28:be:d4:7f:81:91:b6:
                    ab:22:f3:e3:49:22:43:74:c0:9c:4c:a3:d4:93:47:
                    3f:3d:b1:38:52:38:44:10:0a:a6:df:69:df:35:cb:
                    dd:3a:41:f7:64:b1:58:17:d4:27:fc:ee:1c:93:cf:
                    51:ef:3e:60:48:db:7e:17:84:e4:b3:7b:34:0c:1a:
                    c2:d4:eb:d1:56:8b:e1:78:96:91:9e:00:0f:b9:3f:
                    ee:f4:15:dc:8d:b1:88:d1:71:fc:24:13:88:b4:48:
                    d5:22:e6:09:60:a0:e0:92:be:45:1c:2f:53:f0:29:
                    af:76:be:11:a8:d7:55:35:1f:a4:7c:54:66:47:b5:
                    7f:dd:3f:b5:95:8b:3c:de:e2:a1:9d:f2:18:1e:82:
                    b4:66:b7:ad:c1:c0:ab:b9:76:03:aa:d0:bb:5e:70:
                    ee:3d:03:f7:34:ce:af:39:64:d2:b3:7b:19:64:59:
                    50:84:67:b5:27:c0:4a:f2:22:60:35:e4:26:fc:df:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:92:C2:DA:96:8C:F8:06:A6:95:32:6E:2C:11:CF:D8:22:F7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8abbe10-deb5-3566-bb4f-06022f486344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:01:0c:5c:cf:fc:2e:50:e1:01:fc:5e:54:95:48:8c:95:
         ec:93:3a:71:0e:89:ed:52:8c:fa:22:41:53:91:e4:ff:18:7e:
         e3:19:75:fe:3c:50:5a:a9:ed:83:0b:a1:74:fc:a2:99:4e:c6:
         4d:31:df:52:c2:1b:57:fe:16:08:dc:fe:75:35:cb:c5:51:37:
         cb:cd:f7:d2:a7:67:e0:d7:22:cc:2f:33:a9:a7:d9:b3:0d:b2:
         6b:57:76:d7:39:61:39:f8:ff:b5:47:ea:08:7a:4f:4c:2c:1b:
         0c:3f:4d:29:1c:fc:7a:6b:e6:37:29:56:ff:fb:66:19:fa:8a:
         dd:df:33:20:23:68:9f:ea:96:93:69:bd:db:71:de:89:5d:72:
         e7:72:52:dd:16:50:7b:0a:2a:e7:1f:d3:aa:de:ce:b6:8e:13:
         b8:93:d0:7e:e9:29:ae:90:8c:70:f3:dc:5d:d5:ae:7c:9e:33:
         16:72:f2:7f:c8:d2:34:99:32:b9:b7:52:7c:e3:6b:09:70:01:
         2f:72:6d:88:8d:f5:72:db:5d:45:0e:0f:60:e8:b7:bf:09:22:
         1e:b1:5c:d1:fc:6b:4b:dd:6b:27:09:12:80:1e:f1:fa:93:11:
         11:58:90:45:14:77:3a:7c:05:cf:0d:91:ff:d3:73:f8:c6:59:
         b9:72:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:18 2026 by rpki-client