Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
File:                     f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa (raw, json)
Hash identifier:          9363PgZwTprIFWkwcVsRqIfOrPE+GCuWl4xUiT0olGU=
Subject key identifier:   9C:1A:CC:52:EE:75:6B:56:0F:5D:76:48:8E:7F:B2:5F:B8:1B:56:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202D86854646DA6E761140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     36631
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2d:86:85:46:46:da:6e:76:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5ae24425-3df7-4f39-9053-233580a75672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:65:f1:70:f0:4e:f3:a6:e8:57:3f:84:38:
                    e5:ff:4c:21:13:2a:99:93:f1:94:f5:05:6e:1a:35:
                    9c:fb:9f:e1:9c:55:74:af:f7:f3:65:91:e0:29:db:
                    99:5d:81:5c:ab:f8:98:c3:f3:73:16:37:15:c8:dc:
                    91:96:e3:b4:00:f7:ad:ce:8e:54:4a:60:fc:15:c5:
                    f8:35:73:06:3d:04:e9:5c:99:2b:60:03:79:2b:94:
                    12:31:e3:2c:66:5d:9a:51:64:c1:ca:e9:e6:f0:b0:
                    c3:6c:0a:a8:fe:af:86:96:aa:75:79:97:18:47:fd:
                    6e:2b:b4:d3:e7:65:9c:32:af:8a:52:1c:17:eb:2c:
                    01:11:65:4b:fb:78:27:49:48:40:be:3d:1b:1d:22:
                    37:74:ba:3a:46:66:a9:53:e9:2b:05:22:ce:04:8b:
                    9e:7f:f8:ed:67:96:ae:da:f8:05:50:18:06:46:3d:
                    9f:3e:3b:fd:5e:f3:af:e3:c1:dd:d8:d2:a4:36:e5:
                    c4:3a:99:88:cb:e9:52:4b:73:6f:5a:bd:99:47:6a:
                    d0:e5:b5:26:0f:50:ae:cf:c2:b6:2d:3a:fa:66:05:
                    83:b6:6c:3b:5f:b1:a4:14:89:f7:ba:e1:f7:6d:5f:
                    7e:11:48:f3:1f:a4:59:0b:06:ef:df:25:0a:0a:04:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:CC:52:EE:75:6B:56:0F:5D:76:48:8E:7F:B2:5F:B8:1B:56:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cc:0f:dd:e0:93:e8:08:dd:23:0b:86:fe:4b:77:66:dd:10:
         73:c9:e4:bf:a5:1f:7d:6f:14:c0:c5:e5:99:1f:07:20:62:e2:
         28:31:ec:9e:e7:ab:c4:7b:6f:a6:3c:af:a6:22:31:d4:7d:2a:
         71:83:97:d7:e5:59:4c:8e:32:4b:82:b8:3c:a1:d8:18:b7:50:
         fe:b7:ed:ef:f6:b3:98:5f:17:af:81:83:5c:58:6b:9d:6d:ff:
         3a:e0:e9:9a:2d:f9:fb:d6:32:3a:14:b7:26:a9:c9:3f:3d:45:
         4e:ea:2d:02:04:84:23:90:d1:7e:af:b6:8c:38:7f:33:12:bf:
         49:db:68:11:c9:87:eb:21:3d:21:3f:f1:96:d6:f5:21:b0:ec:
         bd:fc:35:f9:5e:76:98:e7:b1:38:56:34:7f:2f:2e:61:04:a6:
         0d:eb:e6:f2:55:d4:52:53:42:87:ea:e8:da:d4:39:0e:31:64:
         48:d5:77:c1:80:6f:b0:70:8d:f0:5b:40:30:c3:4d:da:c5:60:
         cc:b6:34:16:50:f9:f5:1d:3e:8b:4a:d4:8e:60:53:0c:a9:9e:
         8d:41:73:94:b8:bd:5b:3d:1c:33:cf:50:6c:8b:05:73:b7:a7:
         ec:bc:8e:43:d5:12:1b:77:c9:37:0c:60:51:1d:f0:51:ee:e3:
         7f:b8:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:40 2026 by rpki-client